Is jwks-client safe to use?

jwks-client has no known vulnerabilities on the latest version (2.1.0). DepScope rates its health at 49/100 (high risk).

What is the latest version of jwks-client?

The latest version of jwks-client is 2.1.0, released 2025-09-26.

Does jwks-client have known vulnerabilities?

No known vulnerabilities on the latest version of jwks-client.

Is jwks-client deprecated?

No, jwks-client is actively maintained. Latest release: 2.1.0 (2025-09-26).

What are alternatives to jwks-client?

Popular alternatives to jwks-client in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does jwks-client use?

jwks-client is licensed under MIT.

jwks-client

npmv2.1.0

Library to retrieve public keys from a JWKS endpoint

License MITpermissive23 versions1 maintainers6 deps

https://gitlab.com/JacoKoster/node-jwks-client

/ 100

Health

safe to use

[email protected] is safe to use (health: 49/100)

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

87.2 KBminified

26.5 KB gzipped

6 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (6)

ms jose debug node-fetch lru-memoizer rate-limiter-flexible

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/jwks-client