pyjwkest
Python implementation of JWT, JWE, JWS and JWK
Decision gist · record as of 2026-08-14
Yes-with-conditions. The library implements mature JOSE standards and has low install friction, but its unmaintained status and aging codebase (last release 314 days ago) make it risky for new projects. Consider it only if you are maintaining existing code that already depends on it, or if you are willing to fork and maintain it yourself. For new projects, evaluate actively maintained alternatives.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Depends on pycryptodomex for cryptographic operations; compilation may require Python development headers on some systems.
- Low install friction with pure-Python wheel distribution.
- However, maintenance status is aging—last release was 314 days ago and the project is explicitly marked as not actively maintained, though the repository remains open.
License · maintenance · safety
Apache 2.0 (permissive) — Licensed under Apache 2.0 (permissive), allowing use in commercial and proprietary projects with minimal restrictions.
last release 2025-10-04 (314 days) · last repo commit 2026-01-09 · 93 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 481,494 downloads/mo, #6,427 on PyPI
Alternatives
Verify before relying
pip install pyjwkest
import pyjwkest
# Create and sign a token using the library's JWT/JWS capabilities
# with pycryptodomex for cryptographic operations- Current compatibility with modern Python versions beyond 3.5 (classifiers list 3.5 but requires_python is unspecified)
- Whether unmaintained status poses security risks for new deployments or if existing code is stable enough for production use
- Active community or fork availability if bugs or security issues emerge
- Specific API usage patterns and examples beyond what the description excerpt provides
What it is and what it does
Pyjwkest is a Python library implementing the JOSE standards for JWT, JWS, JWE, and JWK as defined in IETF drafts. It handles creation, signing, encryption, and validation of JSON Web tokens and manages cryptographic keys used in token operations. The library depends on pycryptodomex for cryptographic primitives, requests for HTTP operations, and compatibility libraries (six, future).
The package is in Beta status and has not been actively maintained since its last release 314 days ago. While the repository remains available and has accumulated 93 stars, the maintainer has explicitly stated the library is no longer actively maintained and is seeking someone to take over responsibility. For projects already using it, the code may be stable; for new projects, this unmaintained status is a significant consideration.
Use it for
- Signing and validating JWT tokens in authentication systems and OAuth flows
- Encrypting sensitive data in JSON Web Encryption format for secure transmission
- Managing cryptographic keys in JOSE-compliant applications
- Implementing federated identity or token exchange protocols
- Building security layers in microservices that need standardized token handling
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes-with-conditions.
The library implements mature JOSE standards and has low install friction, but its unmaintained status and aging codebase (last release 314 days ago) make it risky for new projects. Consider it only if you are maintaining existing code that already depends on it, or if you are willing to fork and maintain it yourself. For new projects, evaluate actively maintained alternatives.
Install
pyjwkest on PyPI
Before you install
Low install friction with pure-Python wheel distribution. However, maintenance status is aging—last release was 314 days ago and the project is explicitly marked as not actively maintained, though the repository remains open.
Depends on pycryptodomex for cryptographic operations; compilation may require Python development headers on some systems.
License in practice
Licensed under Apache 2.0 (permissive), allowing use in commercial and proprietary projects with minimal restrictions.
Quickstart
pip install pyjwkest
import pyjwkest
# Create and sign a token using the library's JWT/JWS capabilities
# with pycryptodomex for cryptographic operationsVerify before relying
- Current compatibility with modern Python versions beyond 3.5 (classifiers list 3.5 but requires_python is unspecified)
- Whether unmaintained status poses security risks for new deployments or if existing code is stable enough for production use
- Active community or fork availability if bugs or security issues emerge
- Specific API usage patterns and examples beyond what the description excerpt provides
Package facts
| License | Apache 2.0 permissive |
| Python support | Not specified |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 4 packagespycryptodomexrequestssixfuture |
| Maintenance | Aging 314 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 481,494 / month, #6,427 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 4 - BetaLicense :: OSI Approved :: Apache Software LicenseProgramming Language :: Python :: 2.7Programming Language :: Python :: 3.5Topic :: Software Development :: Libraries :: Python Modules |
Evidence: pyjwkest-1.4.4-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “JOSE standards Python”
- pyjwkestImplements JWT, JWS, JWE, and JWK standards for signing, encrypting,…
- jwskateImplements the JOSE family of IETF standards (JWS, JWK, JWA, JWT,…
- python-joseImplements JOSE (JSON Object Signing and Encryption) standards to…
Give your agent the search over MCP, or paste the wish link into any chat.
More Python Modules packages
Converts domain names between Unicode and ASCII-compatible encoding (Punycode) according to IDNA 2008 and Unicode Technical Standard 46, with security validation and broader script coverage than the standard library.
Install it if you work with internationalized domain names, need to validate domains, or use HTTP clients that depend on it transitively.
Setuptools is a Python build backend and package management tool that handles building, distributing, and installing Python packages, including support for C/C++ extension modules.
PyYAML parses and emits YAML 1.1 data format, enabling serialization and deserialization of configuration files and Python objects to and from human-readable YAML text.
Pydantic validates Python data structures against type hints, coercing and checking input at runtime to ensure it matches a declared schema.
Provides reusable metadata objects for use with PEP-593 `typing.Annotated` to express common constraints like bounds, collection sizes, and predicates on types.
Install it if you use or build libraries that need to express type constraints in a standardized, inspectable way—or if you want to annotate your own types with…
Provides runtime tools to inspect and introspect Python type annotations, enabling programmatic examination of type hints at execution time.
See also python-jose · jwskate · joserfc · jose · jwt · josepy · PyJWT · python-jwt · Authlib