Is @better-auth/oauth-provider safe to use?

@better-auth/oauth-provider has 1 known vulnerabilities on the latest version (1.6.25). DepScope rates its health at 88/100 (low risk).

What is the latest version of @better-auth/oauth-provider?

The latest version of @better-auth/oauth-provider is 1.6.25, released 2026-07-23.

Does @better-auth/oauth-provider have known vulnerabilities?

Yes. @better-auth/oauth-provider has 1 known vulnerabilities. See depscope.dev/pkg/npm/@better-auth/oauth-provider for details.

Is @better-auth/oauth-provider deprecated?

No, @better-auth/oauth-provider is actively maintained. Latest release: 1.6.25 (2026-07-23).

What are alternatives to @better-auth/oauth-provider?

Popular alternatives to @better-auth/oauth-provider in npm include: ?, semver, minimatch, debug, ansi-styles.

What license does @better-auth/oauth-provider use?

@better-auth/oauth-provider is licensed under MIT.

@better-auth/oauth-provider

npmv1.6.25

An oauth provider plugin for Better Auth

License MITpermissive93 versions2 maintainers2 deps653,223 weekly dl

better-auth/better-auth

/ 100

Health

safe to use

@better-auth/[email protected] is safe to use (health: 88/100)

Update to >= 1.7.0-beta.4 to fix known vulnerabilities

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

23/25

security

15/15

maturity

11/15

community

0/15

popularity_floor

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2026-67332	@better-auth/oauth-provider may provide access tokens for unauthorized audiences via unbound resource indicators	1.7.0-beta.4

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

zod jose

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@better-auth/oauth-provider