Is next-auth safe to use?

next-auth has no known vulnerabilities on the latest version (4.24.15). DepScope rates its health at 94/100 (low risk).

What is the latest version of next-auth?

The latest version of next-auth is 4.24.15, released 2026-07-20.

Does next-auth have known vulnerabilities?

No known vulnerabilities on the latest version of next-auth.

Is next-auth deprecated?

No, next-auth is actively maintained. Latest release: 4.24.15 (2026-07-20).

What are alternatives to next-auth?

Popular alternatives to next-auth in npm include: ?, semver, ansi-styles, brace-expansion, ms.

What license does next-auth use?

next-auth is licensed under ISC.

next-auth

npmv4.24.15

Authentication for Next.js

License ISCpermissive727 versions3 maintainers9 deps5,651,367 weekly dl

nextauthjs/next-auth

/ 100

Health

safe to use

[email protected] is safe to use (health: 94/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

12/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

283.1 KBminified

81.6 KB gzipped

9 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (9)

@babel/runtime @panva/hkdf cookie jose oauth openid-client preact preact-render-to-string uuid

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/next-auth

next-auth

npmv4.24.15

Authentication for Next.js

License ISCpermissive727 versions3 maintainers9 deps5,651,367 weekly dl

nextauthjs/next-auth

/ 100

Health

safe to use

[email protected] is safe to use (health: 94/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

12/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

283.1 KBminified

81.6 KB gzipped

9 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (9)

@babel/runtime @panva/hkdf cookie jose oauth openid-client preact preact-render-to-string uuid

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/next-auth