Is @octokit/auth-app safe to use?

@octokit/auth-app has no known vulnerabilities on the latest version (8.2.0). DepScope rates its health at 81/100 (low risk).

What is the latest version of @octokit/auth-app?

The latest version of @octokit/auth-app is 8.2.0, released 2026-02-03.

Does @octokit/auth-app have known vulnerabilities?

No known vulnerabilities on the latest version of @octokit/auth-app.

Is @octokit/auth-app deprecated?

No, @octokit/auth-app is actively maintained. Latest release: 8.2.0 (2026-02-03).

What are alternatives to @octokit/auth-app?

Popular alternatives to @octokit/auth-app in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does @octokit/auth-app use?

@octokit/auth-app is licensed under MIT.

@octokit/auth-app

npmv8.2.0

GitHub App authentication for JavaScript

License MITpermissive113 versions1 maintainers8 deps8,185,619 weekly dl

octokit/auth-app.js

/ 100

Health

safe to use

@octokit/[email protected] is safe to use (health: 81/100)

Health breakdown0 – 100

20/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

30.9 KBminified

9.7 KB gzipped

8 direct dependencies

scoped

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (8)

@octokit/auth-oauth-app @octokit/auth-oauth-user @octokit/request @octokit/request-error @octokit/types toad-cache universal-github-app-jwt universal-user-agent

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@octokit/auth-app