JWS Token Manager
58%
Total Score
63
50
72
90
Only two releases exist, and there have been no releases in about 8 years; this is a significant sign of stagnation for a dependency that may need compatibility or security maintenance.
There were zero commits and zero active maintainers in the last 3 months, consistent with a project that has been inactive for years and increasing abandonment risk.
The package has three runtime dependencies, including Yii2 and namshi/jose. This is a modest dependency surface, but those dependencies add compatibility and maintenance considerations to an already old release.
There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently unhealthy, but it provides no evidence of an active maintenance community.
The repository has no stars or forks and only one watcher, indicating limited visible adoption. Popularity is supporting evidence rather than decisive proof, but it offers little compensating confidence for the lack of recent releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
namshi/jose Version ^6.0 | — | — |
yiisoft/yii2 Version >=2.0.14 <2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.