web-token/jwt-encryption-algorithm-rsa

Registry deprecationdanger

Packagist marks the entire package as abandoned and explicitly names web-token/jwt-library as its replacement. This is a severe adoption warning despite the package having a stable release line.

Release historycaution

The package has 96 releases since August 2018, but its latest release was February 2024 and it had no releases in the last 12 months. That supports an abandonment concern rather than active maintenance.

Repo commit activitycaution

The linked repository recorded zero commits and zero active maintainers in the last three months. A repository push in May 2025 shows some later activity, but does not offset the current lack of commits.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest hygiene concern for a package handling encryption algorithms.

Security policycaution

The repository has no security policy. For a cryptographic JWT component, that is a meaningful transparency and vulnerability-reporting gap.