Aikido Intel
Secure My Code
Package Health

@fastify/oauth2

Clear documentation, TypeScript declarations, and a permissive MIT license make integration straightforward. The small runtime dependency set and active security tooling further reduce maintenance friction.

Latest 8.3.0NPMNPM

94%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-531396
@fastify/oauth2 is vulnerable to Cross-Site Request Forgery (CSRF) in versions 7.2.0 - 8.2.1.
7.2.0 - 8.2.1
Medium
CVE-2023-31999
@fastify/oauth2 is vulnerable to Cross-Site Request Forgery (CSRF) in versions 0.0.0 - 7.2.0.
0.0.0 - 7.2.0
High

Package versions

Maintainers

matteo.collina
eomm
kibertoad
climba03003
gurgunday
tony133
fdawgs

Direct Dependencies

DependencyLast ReleaseScore
simple-oauth2
Version ^5.1.0
—
—
fastify-plugin
Version ^6.0.0
—
—
@fastify/cookie
Version ^11.0.2
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
4 years ago
Unpacked Size
0.3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free
Book a Demo

Free. No credit card required.

Aikido Platform
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Ghent, Belgium | San Francisco, US
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPImplementing

© All Intel data is openly available and commercially licensed.