https://github.com/authlib/joserfc
jose jwa jwe jwk jws jwt
Score: 28.44091371362626
Last synced: about 2 hours ago
JSON representation
Repository metadata:
Implementations of JOSE RFCs in Python
- Host: GitHub
- URL: https://github.com/authlib/joserfc
- Owner: authlib
- License: bsd-3-clause
- Created: 2023-02-05T12:55:51.000Z (almost 4 years ago)
- Default Branch: main
- Last Pushed: 2026-10-23T16:13:35.000Z (15 days ago)
- Last Synced: 2026-11-02T04:07:43.576Z (5 days ago)
- Topics: jose, jwa, jwe, jwk, jws, jwt
- Language: Python
- Homepage: https://jose.authlib.org
- Size: 1.67 MB
- Stars: 181
- Watchers: 6
- Forks: 27
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Contributing: docs/contributing/authors.rst
- Funding: .github/FUNDING.yml
- License: LICENSE
- Code of conduct: .github/CODE_OF_CONDUCT.md
- Security: SECURITY.md
-
Funding:
- Github: authlib, lepture
Owner metadata:
- Name: Authlib
- Login: authlib
- Email:
- Kind: organization
- Description: The ultimate Python library in building OAuth and OpenID Connect servers.
- Website: https://authlib.org/
- Location: Japan
- Twitter: authlib
- Company:
- Icon url: https://avatars.githubusercontent.com/u/32964472?v=4
- Repositories: 14
- Last Synced at: 2026-10-31T18:42:52.403Z
- Profile URL: https://github.com/authlib
GitHub Events
Total
- Commit comment event: 2
- Create event: 22
- Delete event: 10
- Fork event: 6
- Issue comment event: 115
- Issues event: 42
- Pull request event: 43
- Pull request review comment event: 7
- Pull request review event: 20
- Push event: 119
- Release event: 18
- Watch event: 40
- Total: 444
Last Year
- Create event: 4
- Delete event: 4
- Fork event: 1
- Issue comment event: 13
- Issues event: 5
- Pull request event: 8
- Pull request review comment event: 2
- Pull request review event: 8
- Push event: 29
- Release event: 6
- Watch event: 8
- Total: 88
Committers metadata
Last synced: 1 day ago
Total Commits: 620
Total Committers: 22
Avg Commits per committer: 28.182
Development Distribution Score (DDS): 0.069
Commits in past year: 143
Committers in past year: 13
Avg Commits per committer in past year: 11.0
Development Distribution Score (DDS) in past year: 0.154
| Name | Commits | |
|---|---|---|
| Hsiaoming Yang | m****e@l****m | 577 |
| Éloi Rivard | e****i@y****p | 7 |
| Justin Lovell | j****n@j****m | 5 |
| Viicos | 6****s | 5 |
| Alon Bar-Lev | a****v@g****m | 3 |
| Fabio Greco | 2****u | 3 |
| Carlo Perassi | c****i@g****m | 2 |
| Jan Mrowiec | j****2@g****m | 2 |
| Steve Weber | s****r@g****m | 2 |
| dependabot[bot] | 4****] | 2 |
| François Capon | 4****n | 1 |
| Gary Evans | g****y@g****m | 1 |
| Gert Van Gool | g****l@g****m | 1 |
| Jonathan Green | j****n@r****m | 1 |
| Libor Jelínek | l****k@d****m | 1 |
| Neil Smith | n****l@n****k | 1 |
| Ralph Bragg | 3****g | 1 |
| Victor Westerhuis | v****0 | 1 |
| choksi2212 | c****2 | 1 |
| sebastian | s****o@h****m | 1 |
| stormcow | m****e@g****m | 1 |
| tonghuaroot | t****t@g****m | 1 |
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 41
Total pull requests: 67
Average time to close issues: 29 days
Average time to close pull requests: 2 days
Total issue authors: 30
Total pull request authors: 22
Average comments per issue: 1.54
Average comments per pull request: 1.58
Merged pull request: 52
Bot issues: 0
Bot pull requests: 3
Past year issues: 8
Past year pull requests: 13
Past year average time to close issues: 29 days
Past year average time to close pull requests: 2 days
Past year issue authors: 8
Past year pull request authors: 9
Past year average comments per issue: 2.25
Past year average comments per pull request: 2.46
Past year merged pull request: 11
Past year bot issues: 0
Past year bot pull requests: 0
Top Issue Authors
- azmeuk (5)
- bjmc (3)
- feteu (3)
- kimminw00 (2)
- lepture (2)
- sk- (2)
- joeblackwaslike (1)
- reisepass (1)
- alonbl (1)
- RalphBragg (1)
- aio-witc (1)
- Kastier1 (1)
- nextmat (1)
- stormcow (1)
- EkremDincel (1)
Top Pull Request Authors
- lepture (25)
- azmeuk (6)
- feteu (4)
- Viicos (3)
- alonbl (3)
- dependabot[bot] (3)
- FrancoisCapon (2)
- nsmithuk (2)
- janmrow (2)
- bjmc (2)
- viccie30 (2)
- liborjelinek (2)
- mhammerly (2)
- RalphBragg (1)
- ghost (1)
Top Issue Labels
- enhancement (3)
- bug (1)
Top Pull Request Labels
- github_actions (3)
- dependencies (3)
Package metadata
- Total packages: 13
-
Total downloads:
- pypi: 98,534,978 last-month
- conda: 1,812 total
- Total docker downloads: 462,818,484
- Total dependent packages: 10 (may contain duplicates)
- Total dependent repositories: 1 (may contain duplicates)
- Total versions: 71
- Total maintainers: 1
- Total advisories: 6
nixpkgs-24.11: python311Packages.joserfc
Implementations of JOSE RFCs in Python
- Homepage: https://github.com/authlib/joserfc
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/joserfc/default.nix#L42
- Licenses: BSD-3-Clause
- Latest release: 0.12.0 (published 9 months ago)
- Last Synced: 2026-08-15T04:30:42.425Z (3 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 3.267%
- Stargazers count: 6.466%
- Forks count: 6.601%
pypi.org: joserfc
The ultimate Python library for JOSE RFCs, including JWS, JWE, JWK, JWA, JWT
- Homepage:
- Documentation: https://jose.authlib.org/
- Licenses: BSD-3-Clause
- Latest release: 1.8.0 (published 4 days ago)
- Last Synced: 2026-11-06T00:11:31.579Z (1 day ago)
- Versions: 50
- Dependent Packages: 9
- Dependent Repositories: 1
- Downloads: 98,534,978 Last month
- Docker Downloads: 462,818,484
-
Rankings:
- Downloads: 2.696%
- Dependent packages count: 3.169%
- Average: 11.241%
- Stargazers count: 11.917%
- Forks count: 16.875%
- Dependent repos count: 21.552%
- Maintainers (1)
-
Funding:
- https://github.com/sponsors/authlib
-
Advisories:
- joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
- joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
- joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)
- joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
- joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
- joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
anaconda.org: joserfc
joserfc is a Python library that provides a comprehensive implementation of several essential JSON Object Signing and Encryption (JOSE) standards.
- Homepage: https://jose.authlib.org
- Licenses: BSD-3-Clause
- Latest release: 1.7.0 (published 5 months ago)
- Last Synced: 2026-06-04T22:05:00.548Z (5 months ago)
- Versions: 3
- Dependent Packages: 1
- Dependent Repositories: 0
- Downloads: 1,812 Total
-
Rankings:
- Dependent packages count: 50.327%
- Average: 54.739%
- Dependent repos count: 59.15%
nixpkgs-24.11: python312Packages.joserfc
Implementations of JOSE RFCs in Python
- Homepage: https://github.com/authlib/joserfc
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/joserfc/default.nix#L42
- Licenses: BSD-3-Clause
- Latest release: 0.12.0 (published 9 months ago)
- Last Synced: 2026-03-08T06:19:34.597Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
nixpkgs-unstable: python313Packages.joserfc
Implementations of JOSE RFCs in Python
- Homepage: https://github.com/authlib/joserfc
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/joserfc/default.nix#L53
- Licenses: BSD-3-Clause
- Latest release: 1.7.4 (published 6 days ago)
- Last Synced: 2026-11-01T10:57:39.337Z (6 days ago)
- Versions: 3
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
gentoo-portage: dev-python/joserfc
A Python library for JOSE RFCs: JWS, JWE, JWK, JWA, JWT
- Homepage: https://github.com/authlib/joserfc/
- Documentation: https://packages.gentoo.org/packages/dev-python/joserfc
- Licenses: BSD
- Latest release: 1.7.3 (published 4 months ago)
- Last Synced: 2026-07-10T01:16:31.181Z (4 months ago)
- Versions: 4
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-13: joserfc
- Homepage: https://github.com/authlib/joserfc
- Documentation: https://packages.debian.org/trixie/joserfc
- Licenses: bsd-3-clause
- Latest release: 1.1.0-1 (published 9 months ago)
- Last Synced: 2026-03-13T23:13:57.006Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
nixpkgs-unstable: python314Packages.joserfc
Implementations of JOSE RFCs in Python
- Homepage: https://github.com/authlib/joserfc
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/joserfc/default.nix#L53
- Licenses: BSD-3-Clause
- Latest release: 1.7.4 (published 6 days ago)
- Last Synced: 2026-11-01T11:32:43.013Z (6 days ago)
- Versions: 3
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
nixpkgs-24.05: python312Packages.joserfc
Implementations of JOSE RFCs in Python
- Homepage: https://github.com/authlib/joserfc
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/joserfc/default.nix#L42
- Licenses: BSD-3-Clause
- Latest release: 0.9.0 (published 9 months ago)
- Last Synced: 2026-03-09T04:09:49.813Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
guix: python-joserfc
Python library for JOSE RFCs
- Homepage: https://github.com/authlib/joserfc
- Documentation: https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/python-web.scm#n3816
- Licenses: bsd-3
- Latest release: 1.0.1 (published 8 months ago)
- Last Synced: 2026-04-27T16:39:56.980Z (6 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
nixpkgs-24.05: python311Packages.joserfc
Implementations of JOSE RFCs in Python
- Homepage: https://github.com/authlib/joserfc
- Documentation: https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/joserfc/default.nix#L42
- Licenses: BSD-3-Clause
- Latest release: 0.9.0 (published 9 months ago)
- Last Synced: 2026-05-11T17:11:18.180Z (6 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
pkgsrc-netbsd-x86_64-10.1-all: security/py-joserfc
Python library for JOSE RFCs, including JWS, JWE, JWK, JWA, JWT
- Homepage: https://github.com/authlib/joserfc
- Documentation: https://pkgsrc.se/security/py-joserfc
- Licenses: modified-bsd
- Latest release: 1.6.8 (published 4 months ago)
- Last Synced: 2026-07-20T06:32:33.677Z (4 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-24.10: joserfc
- Homepage: https://github.com/authlib/joserfc
- Licenses: bsd-3-clause
- Latest release: 1.0.0-2 (published 9 months ago)
- Last Synced: 2026-03-13T10:16:32.331Z (8 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Dependencies
- actions/checkout v7 composite
- actions/download-artifact v8 composite
- actions/setup-node v6 composite
- actions/setup-python v6 composite
- actions/upload-artifact v7 composite
- pypa/gh-action-pypi-publish release/v1 composite
- SonarSource/sonarqube-scan-action v8 composite
- actions/checkout v7 composite
- actions/setup-python v6 composite
- codecov/codecov-action v6 composite
- actions/checkout v7 composite
- actions/deploy-pages v5 composite
- actions/setup-python v6 composite
- actions/upload-pages-artifact v5 composite
- cryptography >=45.0.1
- alabaster 1.0.0
- ast-serialize 0.13.1
- babel 2.18.0
- certifi 2026.10.19
- cffi 2.1.1
- cfgv 3.5.0
- charset-normalizer 3.5.2
- click 8.5.0
- colorama 0.4.6
- coverage 7.16.2
- cryptography 50.0.2
- distlib 0.4.4
- docutils 0.22.4
- filelock 4.2.4
- identify 2.6.20
- idna 3.20
- imagesize 2.0.1
- iniconfig 2.3.1
- jinja2 3.1.6
- joserfc 9.0.4
- librt 0.16.0
- markdown-it-py 4.2.0
- markupsafe 3.0.4
- mdit-py-plugins 0.6.1
- mdurl 0.1.2
- mypy 2.4.0
- mypy-extensions 1.1.0
- myst-parser 5.1.0
- nodeenv 1.11.0
- packaging 26.3
- pathspec 1.1.1
- platformdirs 4.13.5
- pluggy 1.7.0
- pre-commit 4.7.0
- pycparser 3.11
- pycryptodome 4.1.0
- pygments 2.21.0
- pygments-styles 0.3.0
- pytest 9.1.1
- pytest-cov 7.1.0
- python-discovery 1.6.4
- pyyaml 6.0.3
- requests 2.34.2
- roman-numerals 4.1.0
- ruff 0.17.1
- shibuya 2026.7.12
- snowballstemmer 3.1.1
- sphinx 9.0.4
- sphinx 9.1.1
- sphinx-contributors 0.3.0
- sphinx-copybutton 0.5.2
- sphinx-design 0.7.0
- sphinx-iconify 0.3.0
- sphinx-intl 2.4.0
- sphinx-last-updated-by-git 0.3.8
- sphinx-sitemap 2.9.0
- sphinxcontrib-applehelp 2.0.0
- sphinxcontrib-devhelp 2.0.0
- sphinxcontrib-htmlhelp 2.1.0
- sphinxcontrib-jsmath 1.0.1
- sphinxcontrib-qthelp 2.0.0
- sphinxcontrib-serializinghtml 2.0.0
- tomli 2.5.0
- typing-extensions 4.16.0
- urllib3 2.8.0
- virtualenv 21.14.11