worldxyj/jwt

Its tiny scope, clear MIT licensing, and concise usage documentation reduce adoption friction. No automated security scanning is visible, so changes would receive limited ongoing scrutiny.

Latest v1.0.2

Packagist

54%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account. This is consistent ownership, though it does not provide organizational backing or redundancy.

Release history

The package has had only three releases, all clustered around July 2023, with no release in roughly three years. That leaves maintenance and compatibility uncertain despite the stable version line.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old release history, this is meaningful evidence of weak current maintenance.

Repo popularity

The repository has no stars or forks and only one watcher. This is weak supporting evidence of limited adoption, but popularity alone does not determine package health.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured. The lack of scanning lowers transparency and ongoing review coverage.