Is did-jwt safe to use?

did-jwt has no known vulnerabilities on the latest version (8.0.18). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of did-jwt?

The latest version of did-jwt is 8.0.18, released 2025-08-25.

Does did-jwt have known vulnerabilities?

No known vulnerabilities on the latest version of did-jwt.

Is did-jwt deprecated?

No, did-jwt is actively maintained. Latest release: 8.0.18 (2025-08-25).

What are alternatives to did-jwt?

Popular alternatives to did-jwt in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does did-jwt use?

did-jwt is licensed under Apache-2.0.

did-jwt

npmv8.0.18

Library for Signing and Verifying JWTs that use DIDs as issuers and JWEs that use DIDs as recipients

License Apache-2.0permissive157 versions6 maintainers9 deps87,457 weekly dl

decentralized-identity/did-jwt

/ 100

Health

use with caution

[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

125.6 KBminified

42.9 KB gzipped

9 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (9)

@noble/ciphers @noble/curves @noble/hashes @scure/base canonicalize did-resolver multibase multiformats uint8arrays

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/did-jwt