https://github.com/nearform/fast-jwt
hacktoberfest jwt jwt-token
Score: 25.794241401244424
Last synced: about 17 hours ago
JSON representation
Repository metadata:
Fast JSON Web Token implementation
- Host: GitHub
- URL: https://github.com/nearform/fast-jwt
- Owner: nearform
- License: other
- Created: 2020-01-15T18:31:08.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2026-08-04T08:56:25.000Z (23 days ago)
- Last Synced: 2026-08-13T02:40:50.014Z (14 days ago)
- Topics: hacktoberfest, jwt, jwt-token
- Language: JavaScript
- Homepage: https://nearform.github.io/fast-jwt/
- Size: 1.09 MB
- Stars: 436
- Watchers: 78
- Forks: 47
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE.md
- Code of conduct: CODE_OF_CONDUCT.md
Owner metadata:
- Name: Nearform
- Login: nearform
- Email: hello@nearform.com
- Kind: organization
- Description:
- Website: http://www.nearform.com/
- Location: Ireland
- Twitter: Nearform
- Company:
- Icon url: https://avatars.githubusercontent.com/u/1544687?v=4
- Repositories: 349
- Last Synced at: 2025-03-26T17:46:14.180Z
- Profile URL: https://github.com/nearform
GitHub Events
Total
- Create event: 53
- Delete event: 53
- Fork event: 10
- Issue comment event: 100
- Issues event: 46
- Pull request event: 115
- Pull request review comment event: 27
- Pull request review event: 70
- Push event: 58
- Release event: 8
- Watch event: 61
- Total: 601
Last Year
- Create event: 15
- Delete event: 18
- Fork event: 2
- Issue comment event: 10
- Issues event: 8
- Pull request event: 15
- Pull request review comment event: 3
- Pull request review event: 6
- Push event: 15
- Watch event: 11
- Total: 103
Committers metadata
Last synced: 6 days ago
Total Commits: 400
Total Committers: 72
Avg Commits per committer: 5.556
Development Distribution Score (DDS): 0.78
Commits in past year: 38
Committers in past year: 14
Avg Commits per committer in past year: 2.714
Development Distribution Score (DDS) in past year: 0.763
| Name | Commits | |
|---|---|---|
| dependabot[bot] | 4****] | 88 |
| Shogun | s****n@c****t | 64 |
| optic-release-automation[bot] | 9****] | 56 |
| Simone Busoli | s****i@g****m | 16 |
| Matteo Pietro Dazzi | m****i@g****m | 15 |
| dependabot-preview[bot] | 2****] | 14 |
| Radomir Drndarski | 9****d | 14 |
| Paolo Insogna | p****o@c****t | 14 |
| Matteo Collina | h****o@m****m | 10 |
| Osmond van Hemert | o****d@v****u | 9 |
| Steve Goode | 5****e | 7 |
| Salman Mitha | s****a@g****m | 6 |
| Guilherme Kammsetzer | 6****k | 5 |
| Antonio Attanasio | a****o@n****m | 4 |
| Marco Ippolito | m****4@g****m | 4 |
| Anthony Gubler | a****r@n****m | 3 |
| Russ Bredihin | b****n | 3 |
| Andrea Carraro | t****n | 3 |
| Allan Jorge | 3****s | 3 |
| lv10 | l****n@g****m | 2 |
| darkgl0w | 3****w | 2 |
| Will Lines | 1****s | 2 |
| Ryan Hinchey | r****y@g****m | 2 |
| Mohammed Gadi | 9****i | 2 |
| Michal Ševčík | s****v@g****m | 2 |
| Filip Skokan | p****p@g****m | 2 |
| Copilot | 1****t | 2 |
| Benoit Pohl | k****k@g****m | 2 |
| Toni Leigh Sharpe | t****e@n****m | 1 |
| Aaron Heckmann | a****b@g****m | 1 |
| and 42 more... | ||
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 102
Total pull requests: 357
Average time to close issues: about 1 month
Average time to close pull requests: 12 days
Total issue authors: 56
Total pull request authors: 45
Average comments per issue: 1.44
Average comments per pull request: 0.85
Merged pull request: 177
Bot issues: 39
Bot pull requests: 250
Past year issues: 15
Past year pull requests: 20
Past year average time to close issues: about 2 months
Past year average time to close pull requests: 15 days
Past year issue authors: 8
Past year pull request authors: 8
Past year average comments per issue: 1.2
Past year average comments per pull request: 1.4
Past year merged pull request: 15
Past year bot issues: 1
Past year bot pull requests: 6
Top Issue Authors
- github-actions[bot] (38)
- SociableSteve (7)
- Gobd (2)
- toomuchdesign (2)
- qoomon (2)
- KMJ-007 (1)
- Uzlopak (1)
- mahendraHegde (1)
- andreysoktoev (1)
- debanjanbasu (1)
- tommyzat (1)
- jdahlborg (1)
- anupamme (1)
- gulshan (1)
- dependabot[bot] (1)
Top Pull Request Authors
- dependabot[bot] (191)
- optic-release-automation[bot] (59)
- ilteoood (22)
- simoneb (7)
- SociableSteve (6)
- guilhermelimak (5)
- Gobd (4)
- msgadi (4)
- marco-ippolito (4)
- bredikhin (3)
- agubler (3)
- toomuchdesign (3)
- Akallabet (2)
- JacopoPatroclo (2)
- ahmedissa (2)
Top Issue Labels
- notify-release (38)
- bug (7)
- enhancement (5)
- javascript (2)
- github_actions (2)
- documentation (1)
- dependencies (1)
Top Pull Request Labels
- dependencies (190)
- javascript (188)
- size:XS (19)
- lgtm (12)
- documentation (5)
- bug (5)
- size:S (5)
- enhancement (3)
- size:XL (3)
- size:XXL (2)
- size:M (2)
- github_actions (2)
Package metadata
- Total packages: 2
-
Total downloads:
- npm: 4,882,384 last-month
- Total docker downloads: 191,441
- Total dependent packages: 64 (may contain duplicates)
- Total dependent repositories: 1,526 (may contain duplicates)
- Total versions: 138
- Total maintainers: 7
- Total advisories: 8
npmjs.org: fast-jwt
Fast JSON Web Token implementation
- Homepage: https://github.com/nearform/fast-jwt
- Licenses: Apache-2.0
- Latest release: 6.3.2 (published 23 days ago)
- Last Synced: 2026-08-25T09:02:11.653Z (1 day ago)
- Versions: 69
- Dependent Packages: 64
- Dependent Repositories: 1,526
- Downloads: 4,882,384 Last month
- Docker Downloads: 191,441
-
Rankings:
- Downloads: 0.302%
- Dependent packages count: 0.499%
- Dependent repos count: 0.518%
- Docker downloads count: 0.545%
- Average: 1.693%
- Stargazers count: 3.512%
- Forks count: 4.783%
- Maintainers (7)
-
Advisories:
- fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver
- fast-jwt has a ReDoS when using RegExp in allowed* leading to CPU exhaustion during token verification
- fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)
- fast-jwt accepts unknown `crit` header extensions (RFC 7515 violation)
- fast-jwt: Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)
- fast-jwt: Incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key
- Fast-JWT Improperly Validates iss Claims
- JWT Algorithm Confusion
proxy.golang.org: github.com/nearform/fast-jwt
- Homepage:
- Documentation: https://pkg.go.dev/github.com/nearform/fast-jwt#section-documentation
- Licenses: other
- Latest release: v6.3.2+incompatible (published 23 days ago)
- Last Synced: 2026-08-25T08:38:45.335Z (1 day ago)
- Versions: 69
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 6.425%
- Average: 6.642%
- Dependent repos count: 6.859%
Dependencies
- @sinonjs/fake-timers ^9.0.0 development
- @types/node ^18.0.0 development
- @typescript-eslint/eslint-plugin ^5.29.0 development
- @typescript-eslint/parser ^5.29.0 development
- cronometro ^1.0.0 development
- eslint ^8.18.0 development
- eslint-config-standard ^17.0.0 development
- eslint-plugin-import ^2.22.0 development
- eslint-plugin-n ^15.2.3 development
- eslint-plugin-promise ^6.0.0 development
- fastify ^4.0.2 development
- jose ^2.0.2 development
- jsonwebtoken ^8.5.1 development
- prettier ^2.0.5 development
- tap ^16.0.0 development
- tsd ^0.22.0 development
- typescript ^4.7.4 development
- asn1.js ^5.3.0
- ecdsa-sig-formatter ^1.0.11
- mnemonist ^0.39.0
- nearform/github-action-check-linked-issues v1 composite
- fastify/github-action-merge-dependabot v3 composite
- nearform/github-action-notify-release v1 composite
- nearform/optic-release-automation-action v4 composite