@supabase/auth-js
Official SDK for Supabase Auth
88%
Total Score
healthy
Active maintenance and strong provenance outweigh workflow credential-scope concerns.
Health Score Breakdown
All 17 workflows were analyzed successfully, and all 117 action references are pinned, with no untrusted checkouts or script-injection findings. However, high-confidence github-app and secrets-inherit findings expose broader-than-needed credentials, and the audit flags use of trusted publishing; these workflow credential practices warrant caution despite the otherwise strong controls.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2025-48370 @supabase/auth-js is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 2.69.1. | 0.0.0 - 2.69.1 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version 2.8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 2 years ago
- Unpacked Size
- 2.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.