The gap

PASETO is a "secure alternative to JWT" — no algorithm-confusion footguns, versioned

protocols, sensible defaults. On Node, the reference implementation was panva/paseto.

In March 2025 it was archived read-only. The maintained libraries that remain are v4-only

and don't implement PASERK — the companion standard for serializing, wrapping, and sealing