Is next-auth safe to use?

next-auth has no known vulnerabilities on the latest version (4.24.14). DepScope rates its health at 94/100 (low risk).

What is the latest version of next-auth?

The latest version of next-auth is 4.24.14, released 2026-04-14.

Does next-auth have known vulnerabilities?

No known vulnerabilities on the latest version of next-auth.

Is next-auth deprecated?

No, next-auth is actively maintained. Latest release: 4.24.14 (2026-04-14).

What are alternatives to next-auth?

Popular alternatives to next-auth in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does next-auth use?

next-auth is licensed under ISC.

next-auth

npmv4.24.14

Authentication for Next.js

License ISCpermissive725 versions3 maintainers9 deps4,599,434 weekly dl

nextauthjs/next-auth

/ 100

Health

safe to use

[email protected] is safe to use (health: 94/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

12/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

276.1 KBminified

80.5 KB gzipped

9 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (9)

jose uuid oauth cookie preact @panva/hkdf openid-client @babel/runtime preact-render-to-string

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/next-auth

next-auth

npmv4.24.14

Authentication for Next.js

License ISCpermissive725 versions3 maintainers9 deps4,599,434 weekly dl

nextauthjs/next-auth

/ 100

Health

safe to use

[email protected] is safe to use (health: 94/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

12/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

276.1 KBminified

80.5 KB gzipped

9 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (9)

jose uuid oauth cookie preact @panva/hkdf openid-client @babel/runtime preact-render-to-string

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/next-auth