jsonwebtoken
JSON Web Token implementation (symmetric and asymmetric)
npm says
81,433,573
per week
Every tarball fetch: mirrors, scanners, CI and people.
real installs
high confidence≈ 81.4M
per week
Mirror spikes and crawlers removed. CI and dependency installs still count, so this is not a head count.
noise under 1% of npm's count, so nearly all of it counts. noise real installs
Why this estimate
With JavaScript on, this lists what the filter found for this package.
Most used major version: 9, the latest one, with 94% of last week's downloads above the crawler floor. Most used single version: 9.0.3.
Snapshot from the daily build of Nov 6, 2026, last 7 days of npm data. With JavaScript on, this page recomputes it live from the npm API.
How many people use jsonwebtoken?
npm counted 81,433,573 downloads of jsonwebtoken in the last 7 days. Nobody can count people exactly, npm included: it does not record who downloaded what. After removing mirror spikes and crawlers, about 81.4M look like real installs. At this scale most of them come from CI, builds and other packages that depend on jsonwebtoken, so the number of people behind them is far smaller.
Is jsonwebtoken still maintained?
Less clear: the last release is more than six months old. The latest version, 9.0.3, came out on Dec 4, 2025. The last 12 months saw 1 stable release. It was first published on Jul 1, 2013. npm lists 1 maintainer.
Is jsonwebtoken still used?
Downloads with publish spikes removed are up 41% over 3 months and up 194% over 11 months. For scale, the median of the 269 packages we track, which lean towards today's most downloaded, is up 157% over 11 months, so this one is ahead of that. Last week, 94% of downloads above the crawler floor were on major version 9, the latest one; the most used single version was 9.0.3, with 70%. Weekdays get 1.6× the downloads of weekends, which fits people at work, though CI follows the same rhythm. Crawlers account for about 2,140 downloads a week, roughly 26 per version.
How the estimate works
- Cut the spike every new version gets from mirrors in its first days.
- Subtract the flat floor robots download from every version each week.
- Show what is left as a range, with a confidence level. It still includes CI and dependency installs, so it is not a count of people.