Package Health/@kinde-oss/kinde-auth-nextjs

@kinde-oss/kinde-auth-nextjs

Kinde Auth SDK for NextJS

Latest 2.13.2

NPM

86%

Total Score

healthy

Healthy: active organization-backed maintenance and frequent releases outweigh the workflow pinning gap.

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation or trusted-publisher provenance is present, which limits release transparency, but the repository provides active build and release workflows that partly compensate.

Workflow audit

Both workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, weakening build reproducibility.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2024-10389 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @kinde-oss/kinde-auth-nextjs is vulnerable to Improper Certificate Validation in versions 1.8.1 - 2.3.11.	1.8.1 - 2.3.11	Medium
AIKIDO-2024-10353 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @kinde-oss/kinde-auth-nextjs is vulnerable to Improper Certificate Validation in versions 1.8.3 - 2.3.11.	1.8.3 - 2.3.11	Critical
AIKIDO-2024-10317 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @kinde-oss/kinde-auth-nextjs is vulnerable to Storage of Sensitive Information in a Cookie in versions 1.8.19 - 1.10.1 and 2.0.0 - 2.3.8.	1.8.19 - 1.10.12.0.0 - 2.3.8	Medium

Package versions

Maintainers

kinde_engineering

kooshakinde

Direct Dependencies

Dependency	Last Release	Score
destr Version ^2.0.5	—	—
cookie Version ^1.0.2	—	—
uncrypto Version ^0.1.3	—	—
crypto-js Version ^4.2.0	—	—
@kinde/jwt-decoder Version ^0.2.0	—	—