Is github.com/dgrijalva/jwt-go safe to use?

github.com/dgrijalva/jwt-go has 2 known vulnerabilities on the latest version (v3.2.0+incompatible). DepScope rates its health at 44/100 (high risk).

What is the latest version of github.com/dgrijalva/jwt-go?

The latest version of github.com/dgrijalva/jwt-go is v3.2.0+incompatible, released 2018-03-08.

Does github.com/dgrijalva/jwt-go have known vulnerabilities?

Yes. github.com/dgrijalva/jwt-go has 2 known vulnerabilities. See depscope.dev/pkg/go/github.com/dgrijalva/jwt-go for details.

Is github.com/dgrijalva/jwt-go deprecated?

No, github.com/dgrijalva/jwt-go is actively maintained. Latest release: v3.2.0+incompatible (2018-03-08).

What are alternatives to github.com/dgrijalva/jwt-go?

DepScope has no curated alternatives for github.com/dgrijalva/jwt-go at this time.

What license does github.com/dgrijalva/jwt-go use?

github.com/dgrijalva/jwt-go is licensed under MIT.

depscope

Packages

Integrate API Docs Curator Benchmark Coverage

Related on DepScope

Alternatives

github.com/golang-jwt/jwt— Maintained fork after dgrijalva archived
github.com/golang-jwt/jwt/v5— dgrijalva/jwt-go is abandoned - golang-jwt is the community

Known bugs

2 non-CVE bugs →

All Go packages →
Breaking changes index →
Bug index →
AI hallucination corpus →

depscope/go/github.com/dgrijalva/jwt-go

github.com/dgrijalva/jwt-go

govv3.2.0+incompatible

ARCHIVE - Golang implementation of JSON Web Tokens (JWT). This project is now maintained at:

License MITpermissive14 versions55 maintainers0 deps10,761 weekly dl

dgrijalva/jwt-go

/ 100

Health

update required

github.com/dgrijalva/[email protected]+incompatible has vulnerabilities — update to latest

Update to >= 4.0.0-preview1 to fix known vulnerabilities

DepScope

Package intelligence for AI agents. 19 ecosystems.

Resources

API Documentation Hallucination Benchmark For Enterprise Swagger / OpenAPI Popular Packages Coverage AI Plugin Setup Watch the pitch (60s)

Legal

Legal hub Privacy Policy Terms of Service Cookie Policy Acceptable Use Attribution DPA Sub-processors Security ImprintContact 中文

Moderate health score (44/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

0/25

maintenance

10/20

popularity

20/25

security

9/15

maturity

5/15

community

Vulnerabilities

1 high1 low

Advisories (2)

Severity	ID	Summary	Fixed in
high	CVE-2020-26160	Authorization bypass in github.com/dgrijalva/jwt-go	4.0.0-preview1
unknown	CVE-2020-26160	Authorization bypass in github.com/dgrijalva/jwt-go	4.0.0-preview1

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

0

Primary author dominance

0%

GitHub stars

10,759

single active maintainer 3marchived repo

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/dgrijalva/jwt-go

Last updated · 2018-03-08T23:13:08Z

github.com/dgrijalva/jwt-go v3.2.0+incompatible security: 2 vulnerabilities, health 44/100 | DepScope