Deprecating jwa and jws packages

[omsmith]

I have not found the time to properly maintain these packages and @brianloveswords has also been otherwise occupied. Most updates/fixes I would want to do are in some way breaking, or involve a different API. Spending time building a different API seems largely wasteful when other seemingly great packages already exist such as @panva's jose. Seeking new maintainers seems wasteful for the same reason.

I would like to deprecate these packages in order to stop worrying about them and point users to alternatives. Don't have a date in mind, but "soon".

[ahane]

Maybe offer them up to http://auth0.com they are a big cooperation and seem to depend on this package:
https://github.com/auth0/node-jsonwebtoken

maybe their responsible disclosure program is a fast way to reach somebody:
https://auth0.com/responsible-disclosure-policy/

[panva]

This repo has been transferred to auth0 last year and there are no concrete plans to deprecate it.