tinypan/jwt
The artifact is minimal, with one runtime dependency and Composer build tooling. A single organization-backed repository exists, but the release history and recent activity provide little evidence of ongoing care.
44%
Total Score
50
64
50
Health Score Breakdown
All four releases arrived within about 25 minutes on the first release day, followed by roughly seven months without another release; this suggests an unfinished or abandoned release pattern.
The repository had zero commits and zero active maintainers in the last three months, consistent with the package's stalled release history and increasing abandonment risk.
No license is declared, detected, or included in the package or repository, leaving the legal terms for reuse unclear.
post-install-cmd and post-update-cmd scripts run during installation or updates, adding supply-chain and reproducibility exposure even though no malicious behavior is established here.
The published artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README weakens consumer documentation for a library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 panxu |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.