Is devise_token_auth safe to use?

devise_token_auth has no known vulnerabilities on the latest version (1.2.6). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of devise_token_auth?

The latest version of devise_token_auth is 1.2.6, released 2025-11-21.

No known vulnerabilities on the latest version of devise_token_auth.

No, devise_token_auth is actively maintained. Latest release: 1.2.6 (2025-11-21).

Popular alternatives to devise_token_auth in RubyGems include: jmespath, netrc, thread_safe, crass, tzinfo.

devise_token_auth is licensed under WTFPL.

rubygemsv1.2.6

For use with client side single page apps such as the venerable https://github.com/lynndylanhurley/ng-token-auth.

License WTFPLpermissive20 versions3 deps180,023 weekly dl

/ 100

Health

safe to use

[email protected] is safe to use (health: 69/100)

Health breakdown0 – 100

15/25

maintenance

14/20

popularity

25/25

security

9/15

maturity

6/15

community

Vulnerabilities

none known

Dependencies (3)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/rubygems/devise_token_auth