yuanyuanli/jwt

Licensecaution

The manifest declares MIT while the artifact license file is recognized as Apache-2.0, creating an unresolved licensing mismatch despite license files existing in both the artifact and repository.

Project backingcaution

The registry namespace and repository owner are different individual accounts, with no organization backing shown. The package-to-repository relationship is nevertheless supported by the matching name and README mention.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This weakens evidence of ongoing maintenance, although the recent release history partly compensates.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no community adoption or external review signal. Popularity is supporting evidence, so this limits confidence more than it determines the verdict.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That leaves security maintenance less transparent for a package handling authentication tokens.