We want to add JWT support to our Dancer2 applications, and are looking for recommendations on what support libraries to use. We would like to ensure that someone is looking closely at possible security flaws.

We saw
https://metacpan.org/pod/Dancer2::Plugin::JWT

which uses

JSON::WebToken

which has been around since Jan 2013 and has gone through a few revisions since then, latest being Mar 2015

Should we be looking at integrating:

Crypt::JWT

which has only seen a single release in Jul 2015. Documentation specifically mentions JWT, JWS and JWE and their related RFCs. Documentation claims that "The module implements all (100%) algorithms defined in https://tools.ietf.org/html/rfc7518 - JSON Web Algorithms (JWA)."

Thanks

Rick