npm package report

Is @auth0/nextjs-auth0 safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/auth0__nextjs-auth0

npm packagelast checked 2026-09-19

@auth0/nextjs-auth0 · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 28 graph-tracked dependencies · provenance: unknown

SIGNALS

Advisory HistoryclearOK

7 historical advisory record(s) on this package (max severity HIGH). Add a version to check whether it is affected.

Anomaly HistoryclearOK

1 historical anomaly alert(s) (maintainer_change) on this package. Add a version to check whether it is affected.

DEPENDENCIES

@edge-runtime/cookies@^5.0.1clean

eslint@^9.20.0clean

eslint-config-prettier@10.1.8clean

@eslint/js@^9.20.0clean

eslint-plugin-prettier@5.5.5clean

eslint-plugin-react@^7.37.4clean

globals@^15.14.0clean

@ianvs/prettier-plugin-sort-imports@^4.3.1clean

jose@^6.0.11clean

jsdom@^26.1.0clean

msw@^2.7.5clean

next@15.2.8clean

oauth4webapi@^3.8.2clean

openid-client@^6.8.0clean

@playwright/test@^1.48.2clean

prettier@^3.3.3clean

@stylistic/eslint-plugin-ts@^3.1.0clean

swr@^2.2.5clean

@testing-library/react@^16.3.0clean

typedoc@^0.28.4clean

PACKAGE @auth0/nextjs-auth0ECOSYSTEM npmDECISION ALLOW

Weekly downloads

2.3M

GitHub stars

Centrality tier

tier 2

Build provenance

unknown

Direct dependencies

History on this package: action pinned to floating ref, not a SHA (×28)

Baked snapshot · run a live check for the current verdict · browse all packages