What should it do?

Migrate from jwt-go to golang-jwt because of security issues.

See this report for details https://github.com/wtfutil/wtf/security/dependabot/go.sum/github.com%2Fdgrijalva%2Fjwt-go/open