vicephp/virtue-jwt

The package includes focused tests, release notes, and a source repository that matches the published package. Its very short README, absent security policy, and low public adoption leave less assurance for long-term use.

Latest 0.10.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes tests and this exact version has GitHub release notes describing security-related key-handling changes. The README is only 87 characters, which is a modest documentation gap for a library consumers must integrate.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, which conflicts with the strong registry release cadence and raises concern about current development continuity.

Repo popularity

The repository has zero stars, one fork, and two watchers. Popularity is only supporting evidence, but these figures provide little independent evidence of broad review or adoption.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That weakens automated assurance for a package handling cryptographic tokens, though it is not evidence of a defect by itself.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities in this security-sensitive library.