jsonwebtoken
v10.4.0 StableCreate and decode JWTs in a strongly typed way.
Quick Verdict
- ✓Actively maintained (updated 63d ago)
- ✓Stable API (10.x for 10+ years)
- ✓Massive adoption (22.1K crates depend on it)
- !Heavy dependency tree (25 direct deps)
- ✓Permissive license (MIT)
Security
Deep Insights
12.5M downloads in the last 30 days (417.3K/day). Volume is roughly flat compared to the previous period.
22.1K crates depend on jsonwebtoken — it's part of the Rust ecosystem's core infrastructure. Removing it from your dependency tree would be extremely difficult.
jsonwebtoken has only 1 owner despite 22.1K dependents. This is a bus-factor concern — consider the implications for long-term support.
The API has been stable (1.x) for over 10 years with 57 releases. This level of maturity means you can depend on it without worrying about breaking changes.
25 direct dependencies. Consider the impact on compile times and supply chain complexity.
Notable dependents include google-cloud-auth, octocrab, rmcp, alloy-transport-http, ethers-providers. When high-quality crates choose jsonwebtoken, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Most downloaded crates that depend on jsonwebtoken
Version Adoption
Release Timeline
Feature Flags
default =["use_pem"]