jose has no known vulnerabilities on the latest version (0.3.5+2). DepScope rates its health at 72/100 (moderate risk).

What is the latest version of jose?

The latest version of jose is 0.3.5+2, released 2026-03-31.

Does jose have known vulnerabilities?

No known vulnerabilities on the latest version of jose.

No, jose is actively maintained. Latest release: 0.3.5+2 (2026-03-31).

DepScope has no curated alternatives for jose at this time.

jose is licensed under BSD-3-CLAUSE.

pubv0.3.5+2

Javascript Object Signing and Encryption (JOSE) library supporting JWE, JWS, JWK and JWT

License BSD-3-CLAUSEpermissive20 versions1 maintainers9 deps22,966 weekly dl

/ 100

Health

safe to use

[email protected]+2 is safe to use (health: 72/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

9/15

maturity

3/15

community

Vulnerabilities

none known

Maintainer trust

Active maintainers (3m)

2

Contributors (12m)

2

Primary author dominance

92%

GitHub stars

56

single author dominance

Dependencies (9)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pub/jose

Last updated · 2026-03-31T08:27:17.006179Z