A collection of utilities for better-auth
82%
Total Score
healthy
Healthy, with the main concern being all recent commits coming from one contributor.
All 11 commits in the last three months came from one contributor, creating a meaningful continuity risk. Organization backing partly offsets this concentration because maintenance can be handed off within the project.
The project uses TypeScript, Vitest, and build tooling, but no security-scanning tool was detected. The build and test tooling support maintainability while the missing security scan modestly lowers confidence.
The repository has no security policy, so the process for reporting and handling vulnerabilities is unclear. This is a hygiene and transparency gap, not evidence that the release is unsafe by itself.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-824167 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @better-auth/utils is vulnerable to Observable Timing Discrepancy in versions 0.1.1 - 0.4.1. | 0.1.1 - 0.4.1 | Low |
| Dependency | Last Release | Score |
|---|---|---|
@noble/hashes Version ^2.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.