If you want to contribute a new auth provider integration we recommend you start by implementing it as a custom auth provider in a Cedar App first. When that works you can package it up as an npm package and publish it on your own. You can then create a P
72%
Total Score
caution
Usable with caveats: the linked repository does not identify this package, and its workflow audit is incomplete.
The repository name does not match the package and its README does not mention the package, so the package-to-source relationship is not clearly demonstrated even though it is in the same organization namespace.
The audit analyzed 30 of 36 workflows and found high-confidence secrets-inherit findings plus an adhoc package installation; the high-confidence template-injection finding has no reported untrusted checkout or script-injection sink, while the low-confidence cache finding is limited hygiene evidence.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10052 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @cedarjs/auth-dbauth-setup is vulnerable to Predictable Exact Value from Previous Values in versions 0.1.0 - 2.3.1. | 0.1.0 - 2.3.1 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
prompts Version 2.4.2 | — | — |
termi-link Version 1.1.0 | — | — |
@prisma/internals Version 7.8.0 | — | — |
@cedarjs/cli-helpers Version 7.0.0 | — | — |
@cedarjs/project-config Version 7.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.