@better-auth/sso

SSO plugin for Better Auth

Latest 1.7.7

91%

Total Score

healthy

Healthy release with active maintenance, reproducible publishing, and strong repository hygiene; the package-to-repository link is slightly unclear.

Are you affected? Scan for Free

Health Score Breakdown

Repo package mention

The repository name does not match the package name and its README does not mention @better-auth/sso. Although this can occur for a monorepo sub-package, the package-to-repository relationship is not explicit and warrants caution.

Workflow audit

All 20 workflows were analyzed successfully, all 78 action references are pinned, and all workflows have read-only permissions. High-confidence github-app findings indicate blanket installation permissions in three maintenance workflows, but there is no untrusted checkout or script injection; the trusted-publishing finding is informational and the release has GitHub npm provenance.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-461021 @better-auth/sso is vulnerable to Improper Authorization in versions 1.2.10 - 1.6.10.	1.2.10 - 1.6.10	High
CVE-2026-53513 @better-auth/sso is vulnerable to Improper Input Validation in versions 0.1.0 - 1.6.11.	0.1.0 - 1.6.11	Critical
AIKIDO-2026-95917 @better-auth/sso is vulnerable to Improper Authentication in versions 0.0.1 - 1.6.20.	0.0.1 - 1.6.20	High
AIKIDO-2026-10480 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @better-auth/sso is vulnerable to Improper Verification of Cryptographic Signature in versions 1.6.0 - 1.6.2.	1.6.0 - 1.6.2	High
AIKIDO-2026-10012 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @better-auth/sso is vulnerable to Allocation of Resources Without Limits or Throttling in versions 1.4.0 - 1.4.9.	1.4.0 - 1.4.9	Medium