Package Health Score

79 / 100

security
No known security issues
popularity
Popular
maintenance
Sustainable
community
Sustainable

Popularity

Popular

GitHub Stars: 83
Forks: 6
Contributors: 5

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package joserfc, we found that it has been starred 83 times.

Security

No known security issues

Security and license risk for latest version

Release Date: Jul 14, 2024
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
0
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

BSD-3-Clause

Security Policy

Yes

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Sustainable

Commit Frequency

Open Issues: 3
Open PR: 0
Last Release: 4 months ago
Last Commit: 1 month ago

Further analysis of the maintenance status of joserfc based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

We found that joserfc demonstrates a positive version release cadence with at least one new version released in the past 12 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Sustainable

Readme: Yes
Contributing.md: No
Code of Conduct: Yes
Contributors: 5
Funding: Yes

This project has seen only 10 or less contributors.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: >=3.8

Age: 2 years
Latest Release: 4 months ago
Dependencies: 1 Direct
Versions: 14
Maintainers: 1
Wheels: OS Independent

Readme

JOSE RFC

·joserfc· is a Python library that provides a comprehensive implementation of several essential JSON Object Signing and Encryption (JOSE) standards.

This package contains implementation of:

RFC7515: JSON Web Signature
RFC7516: JSON Web Encryption
RFC7517: JSON Web Key
RFC7518: JSON Web Algorithms
RFC7519: JSON Web Token
RFC7520: Examples of Protecting Content Using JSON Object Signing and Encryption
RFC7638: thumbprint for JWK
RFC8037: OKP Key and EdDSA algorithm
RFC8812: ES256K algorithm

And draft RFCs implementation of:

C20P and XC20P
ECDH-1PU algorithms

Usage

A quick and simple JWT encoding and decoding would look something like this:

&gt;&gt;&gt; from joserfc import jwt
&gt;&gt;&gt; from joserfc.jwk import OctKey
&gt;&gt;&gt; encoded = jwt.encode({"alg": "HS256"}, {"k": "value"}, key)
&gt;&gt;&gt; encoded
'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJrIjoidmFsdWUifQ.ni-MJXnZHpFB_8L9P9yllj3RNDfzmD4yBKAyefSctMY'
&gt;&gt;&gt; token = jwt.decode(encoded, key)
&gt;&gt;&gt; token.header
{'alg': 'HS256', 'typ': 'JWT'}
&gt;&gt;&gt; token.claims
{'k': 'value'}
&gt;&gt;&gt; claims_requests = jwt.JWTClaimsRegistry()
&gt;&gt;&gt; claims_requests.validate(token.claims)

Useful Links

GitHub:
Docs:

License

Licensed under BSD. Please see LICENSE for licensing details.

joserfc dependencies

cryptography

FAQs

What is joserfc?

The ultimate Python library for JOSE RFCs, including JWS, JWE, JWK, JWA, JWT. Visit Snyk Advisor to see a full health score report for joserfc, including popularity, security, maintenance & community analysis.

Is joserfc popular?

The python package joserfc receives a total of 144,399 weekly downloads. As such, joserfc popularity was classified as a popular. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is joserfc well maintained?

We found indications that joserfc maintenance is sustainable demonstrating some project activity. We saw a total of 5 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is joserfc safe to use?

The python package joserfc was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 4 November-2024, at 16:08 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

joserfc

The ultimate Python library for JOSE RFCs, including JWS, JWE, JWK, JWA, JWT For more information about how to use this package see README

Ensure you're using the healthiest python packages

Package Health Score

Popularity

Direct Usage Popularity

Security

Security and license risk for latest version

Maintenance

Commit Frequency

Community

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Package

Readme

JOSE RFC

Usage

Useful Links

License

joserfc dependencies

FAQs

What is joserfc?

Is joserfc popular?

Is joserfc well maintained?

Is joserfc safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Direct Usage Popularity

Security and license risk for latest version

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Readme

JOSE RFC

Usage

Useful Links

License

joserfc dependencies

FAQs

What is joserfc?

Is joserfc popular?

Is joserfc well maintained?

Is joserfc safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues