Is fido2-lib safe to use?

fido2-lib has no known vulnerabilities on the latest version (3.5.9). DepScope rates its health at 73/100 (moderate risk).

What is the latest version of fido2-lib?

The latest version of fido2-lib is 3.5.9, released 2026-03-11.

Does fido2-lib have known vulnerabilities?

No known vulnerabilities on the latest version of fido2-lib.

Is fido2-lib deprecated?

No, fido2-lib is actively maintained. Latest release: 3.5.9 (2026-03-11).

What are alternatives to fido2-lib?

Popular alternatives to fido2-lib in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does fido2-lib use?

fido2-lib is licensed under MIT.

fido2-lib

npmv3.5.9

A library for performing FIDO 2.0 / WebAuthn functionality

License MITpermissive59 versions2 maintainers8 deps13,538 weekly dl

webauthn-open-source/fido2-lib

/ 100

Health

safe to use

[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

702.3 KBminified

175.7 KB gzipped

8 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (8)

@hexagon/base64 @peculiar/webcrypto asn1js cbor-x jose pkijs punycode.js tldts

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/fido2-lib