jwks-rsa
11
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
auth0-ossauth0npmauth0brokkrjesseleoktajeffoktajeffbsmith-auth0sanjay.manikandhanniltorresatkohenry.mcardlenicolas.villalobosadam-mcgrath_oktajosecarlos-chavez_atkotj.oktasgarcia-atkoroger.chanmaaantonelewisbyrne-oktatarunpreet.kaur
Keywords
jwksrsajwt
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@types/express | AI (phantom-deps): TypeScript type definitions loaded by convention; standard pattern for @types packages in framework integrations. | ai | |
| dependencies | unvetted-dep:jose | AI (dependencies): jose is a well-known, widely-used JWT/JWK library by Panva; its use in jwks-rsa is expected and appropriate for this package's purpose. | ai | |
| phantom-deps | phantom-dep:@types/jsonwebtoken | AI (phantom-deps): @types/jsonwebtoken is a TypeScript types package declared as a runtime dep for consumers' type inference; no runtime code, stable false positive for this package. | ai |