{"categories":[{"label":"Libraries","url":"https://skillfed.io/packages/category/software-development-libraries/7"},{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"Implements JSON Web Signature (JWS) and JSON Web Encryption (JWE) for securely creating and verifying JSON Web Tokens (JWTs) that carry claims for authorization and authentication.","skillfed_tags":["jwt","legacy","unmaintained"],"use_cases":["Verify or decrypt JWTs created by older jose-based systems that predate current JWT libraries.","Maintain legacy Python 2 codebases that already depend on jose and cannot migrate to modern alternatives.","Prototype JOSE framework concepts in educational settings where the age of the implementation is not a concern.","Integrate with existing systems where jose is a hard dependency and replacement is not feasible."],"what_it_does":"jose is a Python implementation of the JOSE (JSON Object Signing and Encryption) framework, providing tools to create and verify JWTs for secure claim transfer between parties. It supports both JWS (signed, readable tokens) and JWE (encrypted, opaque tokens) formats, along with a subset of JOSE-recommended cryptographic algorithms for authentication and authorization.\n\nThe package is dormant: its last release was in 2015-11-13, it targets Python 2 only, and it has not received active maintenance for nearly a decade. While the repository is not archived and a final commit exists from 2024-05-30, the codebase reflects its age and pre-dates modern Python versions, modern cryptographic best practices, and current JWT standards evolution. It carries no known vulnerabilities in the OSV database as of the query date, but its unmaintained status means security issues may not be discovered or patched.","worth_installing":"No. The package is unmaintained (last release 2015-11-13), targets Python 2 only, and has not received security updates in nearly a decade. For any new project, use an actively maintained JWT library. Only install if you are maintaining legacy Python 2 code that already depends on it and cannot migrate."},"id":"jose","links":{"html":"https://skillfed.io/packages/jose","md":"https://skillfed.io/packages/jose.md","pypi":"https://pypi.org/project/jose/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2015-11-13","license_spdx":null,"license_treatment":"permissive","name":"jose","python_support":"unspecified","summary":"An implementation of the JOSE draft"},"popularity":{"monthly_downloads":244394,"position":8757,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.0.0"}