Skip to main content
Castov
Head-to-Head NPM Comparison

jsonwebtokenvsjose

Detailed package comparison for bundle size, weekly downloads, supply chain security, and license obligations.

Weekly Downloads Leader
jose93.4M/wk
Security Grade Leader
jsonwebtoken100/100
TypeScript Ready
jose
Specification
jsonwebtokenv9.0.3
josev6.2.13
Weekly Downloads34.8M93.4MWinner
Unpacked Size42.4 KB213.3 KB
Security Grade
A+(100/100)
A(90/100)
Lifecycle Scripts Clean (No scripts) Clean (No scripts)
TypeScript SupportCommunity @types Built-in Types (.d.ts)
License TypeMITPERMISSIVEMITPERMISSIVE
Direct Dependencies100
Active Maintainers11
Last ReleaseDec 4, 2025Oct 20, 2026
Install Commandnpm i jsonwebtokennpm i jose
Full Security ReportView jsonwebtoken AuditView jose Audit
Free Castov VS Code Tool

Compare Dependencies Directly in VS Code

Audit supply chain risks, compare lightweight alternative packages, and catch malicious install scripts straight inside your package.json editor.

Download VS Code Extension

More Popular Package Comparisons

react vs vuereact vs angularreact vs sveltevue vs sveltereact vs solid-jspreact vs react

Frequently Asked Questions

Which package is more popular, jsonwebtoken or jose?
jose is currently more popular with higher weekly downloads (93.4M/week) compared to jsonwebtoken (34.8M/week).
Which has better supply chain security, jsonwebtoken or jose?
jsonwebtoken has a security score of 100/100 (Grade A+), while jose holds 90/100 (Grade A). jsonwebtoken scores higher for supply chain hygiene.
Do jsonwebtoken and jose provide TypeScript definitions?
jsonwebtoken may require external @types definitions, while jose includes native TypeScript definitions.
What licenses do jsonwebtoken and jose use?
jsonwebtoken is published under the MIT license (PERMISSIVE), and jose is licensed under MIT (PERMISSIVE).