tokenkit 1.0.1

Type-safe JWT encode/decode for Rust with configurable validation, secret rotation, key rotation, and revocation support
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

# tokenkit: weekly mutation testing with cargo-mutants (informational).
# Policy: engineering-standards/MUTATION.md.
# Baseline (2026-09-07, local): 32 mutants, 6 unviable, 25/26 viable killed
# = 96.2%. Sole survivor is a cfg-phantom (mutants-equivalent.txt).
#
# Promote to gating when the score is stable across 4 consecutive weekly
# runs: set continue-on-error: false and add
# cargo mutants --all-features --fail-under 96
name: mutation

on:
  schedule:
    - cron: "0 3 * * 6" # weekly — Saturday 03:00 UTC
  workflow_dispatch: {}

jobs:
  mutants:
    runs-on: ubuntu-latest
    timeout-minutes: 120
    # Informational until the baseline is triaged.
    continue-on-error: true
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - name: Install cargo-mutants
        run: cargo install --locked cargo-mutants
      - name: Run mutation tests
        run: cargo mutants --all-features -o mutants-out
      - name: Upload mutation report
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: mutants-out
          path: mutants-out/
          if-no-files-found: warn