web-token/jwt-encryption

Registry deprecationdanger

Packagist marks the entire package abandoned and explicitly names web-token/jwt-library as the replacement. This is a severe adoption risk for a new dependency.

Release historydanger

The package has 128 releases since 2017, but none in the last 12 months; its latest release was on February 22, 2024. That indicates the release line is no longer maintained.

Repo commit activitycaution

The linked repository had no commits and no active maintainers in the last three months. This supports the conclusion that development on this package has stopped.

Security policycaution

The repository has no security policy. That reduces transparency for reporting vulnerabilities, although it is secondary to the package's explicit abandonment.