panva/jose

Health v2 · maintenance only

Adoption not part of the score

7767 stars · 378 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A zero-dependency JavaScript/TypeScript library implementing JSON Object Signing and Encryption standards (JWA, JWS, JWE, JWT, JWK, JWKS). It works across Web-interoperable runtimes including Node.js, browsers, Cloudflare Workers, Deno, and Bun.

Use cases

• sign and verify json web tokens in node.js
• verify jwt with remote jwks from an auth provider
• encrypt and decrypt jwe tokens
• issue and validate access tokens in a cloudflare worker
• manage json web keys and key sets in javascript

When to choose

• you need standards-compliant JWT/JWS/JWE handling in JavaScript
• you need a runtime-agnostic library with zero dependencies
• you verify tokens against remote identity provider JWKS endpoints
• you want tree-shakeable ESM for edge or serverless deployments

When to avoid

• you need a full authentication/identity solution rather than token primitives
• you work outside JavaScript/TypeScript ecosystems
• you need non-JOSE token formats like PASETO or simple opaque session tokens

Facets

library · maturity stable

cryptography auth serialization security security web-development developer-tools apis bun browser cloud cross-platform jwt jose jws jwe jwk jwks zero-dependencies tree-shakeable typescript esm nodejs deno

Member repositories

For agents

markdown · JSON · MCP: product_card(name="panva/jose")