Is @auth0/auth0-react safe to use?

@auth0/auth0-react has no known vulnerabilities on the latest version (2.16.2). DepScope rates its health at 84/100 (low risk).

What is the latest version of @auth0/auth0-react?

The latest version of @auth0/auth0-react is 2.16.2, released 2026-04-17.

Does @auth0/auth0-react have known vulnerabilities?

No known vulnerabilities on the latest version of @auth0/auth0-react.

Is @auth0/auth0-react deprecated?

No, @auth0/auth0-react is actively maintained. Latest release: 2.16.2 (2026-04-17).

What are alternatives to @auth0/auth0-react?

Popular alternatives to @auth0/auth0-react in npm include: debug, minimatch, strip-ansi, ms, lru-cache.

What license does @auth0/auth0-react use?

@auth0/auth0-react is licensed under MIT.

@auth0/auth0-react

npmv2.16.2

Auth0 SDK for React Single Page Applications (SPA)

License MITpermissive45 versions18 maintainers1 deps1,105,010 weekly dl

auth0/auth0-react

/ 100

Health

safe to use

@auth0/[email protected] is safe to use (health: 84/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

171.5 KBminified

49.3 KB gzipped

1 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

@auth0/auth0-spa-js

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@auth0/auth0-react