Is @medusajs/auth safe to use?

@medusajs/auth has no known vulnerabilities on the latest version (2.21.0). DepScope rates its health at 92/100 (low risk).

What is the latest version of @medusajs/auth?

The latest version of @medusajs/auth is 2.21.0, released 2026-09-11.

Does @medusajs/auth have known vulnerabilities?

No known vulnerabilities on the latest version of @medusajs/auth.

Is @medusajs/auth deprecated?

No, @medusajs/auth is actively maintained. Latest release: 2.21.0 (2026-09-11).

What are alternatives to @medusajs/auth?

Popular alternatives to @medusajs/auth in npm include: ?, semver, debug, minimatch.

What license does @medusajs/auth use?

@medusajs/auth is licensed under MIT.

@medusajs/auth

npmv2.21.0

Medusa Auth module

License MITpermissive168 versions6 maintainers7 deps133,479 weekly dl

medusajs/medusa

/ 100

Health

safe to use

@medusajs/[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

13/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (7)

jwks-rsa scrypt-kdf @otplib/uri @otplib/core @otplib/totp jsonwebtoken @otplib/plugin-crypto-node

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@medusajs/auth

@medusajs/auth

npmv2.21.0

Medusa Auth module

License MITpermissive168 versions6 maintainers7 deps133,479 weekly dl

medusajs/medusa

/ 100

Health

safe to use

@medusajs/[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

13/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (7)

jwks-rsa scrypt-kdf @otplib/uri @otplib/core @otplib/totp jsonwebtoken @otplib/plugin-crypto-node

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@medusajs/auth