R Observatory: Metrics for jose version 2.0.0

Balamuta, James Joseph

doi:10.5281/zenodo.21843040

jose

2.0.0Package record

JavaScript Object Signing and Encryption

20packages dependsuggested by 7

1.1Mdownloads / year

89.0%test coverage

13/13flavors OK

Overview

About

Maintained by Jeroen OomsCRAN page ↗GitHub ↗Website ↗Issues ↗

Read and write JSON Web Keys (JWK, rfc7517), generate and verify JSON Web Signatures (JWS, rfc7515) and encode/decode JSON Web Tokens (JWT, rfc7519) https://datatracker.ietf.org/wg/jose/documents/. These standards provide modern signing and encryption formats that are natively supported by browsers via the JavaScript WebCryptoAPI https://www.w3.org/TR/webcrypto/#jose, and used by services like OAuth 2.0, LetsEncrypt, and Github Apps.

Changes in 2.0.0

Add support for ED25519 keys and signatures
The 'typ' parameter is no longer required in JWT tokens (#21)

From NEWS in the release

Install

R (CRAN)pak (dev)Ubuntu (r2u)Fedora (COPR)openSUSE (OBS)

install.packages("jose", repos = "https://cloud.r-project.org/")

Installs the current CRAN release. Prebuilt binaries on Windows and macOS.

if (!requireNamespace("pak", quietly = TRUE))
  install.packages("pak", repos = "https://cloud.r-project.org/")
pak::pak("r-lib/jose")

Development version from r-lib/jose. Installs pak first if it is not already available.

Release

# enable cranapt (r2u) if it is not already set up, then install
grep -rqs r2u.stat.illinois.edu /etc/apt/sources.list /etc/apt/sources.list.d/ \
  || curl -fsSL https://raw.githubusercontent.com/eddelbuettel/r2u/master/inst/scripts/add_cranapt_noble.sh | sudo bash
sudo apt install -y r-cran-jose

Fast Ubuntu binaries via r2u (no compilation). The cranapt setup runs once and is skipped when it is already enabled. We list this channel from recorded r2u download activity rather than from a live index of the repository, so treat it as last known rather than guaranteed.

bspm (used by r2u) also needs make: sudo apt install make

# enable the iucar/cran COPR if it is not already present, then install
ls /etc/yum.repos.d/*iucar*cran*.repo >/dev/null 2>&1 \
  || sudo dnf copr enable -y iucar/cran
sudo dnf install -y R-CRAN-jose

RPMs from the iucar/cran COPR, rebuilt from CRAN.

For install.packages() integration in R, also: sudo dnf install R-CoprManager

# add the autoCRAN OBS repo (Tumbleweed) if it is missing, then install
zypper -q lr | grep -qi autoCRAN \
  || sudo zypper addrepo https://download.opensuse.org/repositories/devel:/languages:/R:/autoCRAN/openSUSE_Tumbleweed/devel:languages:R:autoCRAN.repo
sudo zypper install -y R-jose

RPMs auto-built from CRAN on openSUSE OBS (Tumbleweed). We list this channel from recorded autoCRAN download activity rather than from a live index of the repository, so treat it as last known rather than guaranteed.

Health

CRAN checks

13OK

CRAN check page ↗

Slowest check: 1.3 min · r-oldrel-macos-x86_64

Status changes

OK13 OK2026-08-05
NOTE12 OK, 1 NOTE2026-08-01
OK14 OK2026-03-10

Advisories

none known

How this is measured·How advisories are found

Documentation

In release 2.0.0

READMENoVignettesYes · 2 · dynamicNEWSYes · 100% structured · mentions 2.0.0Citation fileNoWebsiteYes

Help pages: 4
Examples that run: 100%2 run in a plain check
Exported functions with examples: 50%
Documented parameters: 100%
Return-value docs: 0%
Help pages citing references: 0%

Vignettes (2)

How these are measured

Downloads

1.1M

CRAN downloads in the past year

Rank #399 · ~3K/day · ~91.9K/mo

Releases R versions

Daily download trend is not available in this view yet.

70.8K30 days

222.4K90 days

1.1M1 year

Compare downloads with other packages →

Also on11.4K r2u4 autocran14.8K conda_forge332 c2d4u

How downloads are counted

Repository

r-lib/jose ↗Organization: r-lib

54Stars

8Forks

6Open issues

0Open PRs

6Releases

111Commits

3Commit identities

111 commits · Last activity 2026-04-21 · 0% stars, 30d

Responsiveness

How these are sampled

PRs merged (all time): 67%
Median days to close, 50 most recently updated closed issues: 82
Median days to close, 50 most recently updated closed PRs: 3

Stars over time

2025-10-08 · 532026-07-07 · 54

How these are measured

PracticesBeta

4 development-tooling and community-health practices detected across 2 families in the upstream repository

Checks run against github.com/r-lib/jose on 2026-10-21.

Continuous integration (3)

GitHub ActionsR CMD check workflowAppVeyor

The R CMD check workflow runs on Linux, macOS and Windows, and on R-devel

Lint, format, editor (1)

RStudio project

How this is detected·Detection ruleset v4 (2026-10-20)

Dependencies

Declared dependencies

6 external dependencies (excludes base and recommended)

Installing jose adds 4 packages (4 with compiled code, 2.1 MB of source tarballs). Heaviest: openssl 1.1 MB, jsonlite 1.0 MB, sys 19 KB.

Depends (1)

openssl

Imports (1)

jsonlite

LinkingTo (0)

none

Suggests (4)

spelling testthat knitr rmarkdown

Enhances (0)

none

Dependency license breakdown →

Reverse dependencies

20direct

25indirect

Imports 20

Suggested by 7

Show all 27 packagesHide all 27 packages

Depends, Imports or LinkingTo, most downloaded first

snowflakeauth AzureAuth AzureKeyVault neonUtilities adobeanalyticsr fireproof shinyOAuth boxr CytobankAPI ausplotsR firebase autosync polished cjar tapLock delta.sharing ghapps rCoinbase solidauthr ellmercodex

Suggests, most downloaded first

openssl httr2 ellmer ragnar aurora meetupr CopernicusDataspace

How these are counted

Code & Tests

People & History

People (1)

Jeroen Ooms

Author, Maintainer since 0.1 (2016)

Releases (7)

Pick two releases to compare their code metrics.

R
R 4.6.0 released · 2026-04-24
2.0.0Latest
record
2026-04-22 · current release · diff ↗
R
R 4.5.0 released · 2025-04-11
1.2.1
record
2024-10-04 · diff ↗
R
R 4.4.0 released · 2024-04-24
R
R 4.3.0 released · 2023-04-21
R
R 4.2.0 released · 2022-04-22
1.2.0
record
2021-11-06 · diff ↗
1.1.0
record
2021-06-14 · diff ↗ ·
added 1 export
jwt_split
R
R 4.1.0 released · 2021-05-18
R
R 4.0.0 released · 2020-04-24
R
R 3.6.0 released · 2019-04-26
1.0
record
2019-01-20 · diff ↗
R
R 3.5.0 released · 2018-04-23
0.2
record
2018-04-12 · diff ↗
R
R 3.4.0 released · 2017-04-21

Show 2 earlier eventsHide 2 earlier events

0.1
record
2016-05-27
R
R 3.3.0 released · 2016-05-03

Package metadata

First published: 2016-05-27
Total releases: 7 / 10 yrs
License: MIT + file LICENSE OSI
Download size: 430 KB

Cite

Cite this package

Run in R for the authors' preferred citation:

citation("jose")

Format

Ooms, J. (2026). jose: JavaScript Object Signing and Encryption (Version 2.0.0) [Computer software]. https://doi.org/10.32614/CRAN.package.jose

This package has no citation file, so citation() returns this entry built from DESCRIPTION.

Cite the R Observatory

For a number measured here: a download total, a coverage figure, an archival date.

Format

APA

Balamuta, J. J. (2026). R Observatory: Metrics for jose version 2.0.0 [Data set]. HJJB, LLC. Data release v2026-10-23. https://doi.org/10.5281/zenodo.21843040

From data release v2026-10-23, which the citation names so these numbers can be found later. More on citing and the projects behind them.

Report a problem with this page →