web-token/jwt-signature

Registry deprecationdanger

Packagist marks the entire package as abandoned and names web-token/jwt-library as its replacement, making continued dependency use a substantial maintenance risk.

Release historycaution

The package has 128 releases since 2017, but none in the last 2 years 7 months; the long release gap supports the abandonment concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, indicating weak current development momentum.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.