@types/oauth
Its definitions are clearly licensed and packaged, while the backing project remains active with broad contributor participation. The repository audit found only medium-confidence template-injection hygiene findings, with no untrusted checkouts or excessive token permissions.
88%
Total Score
100
100
89
83
50
Health Score Breakdown
No build attestation or trusted-publisher provenance is reported, leaving publication origin less transparent, although this is not by itself evidence of an unhealthy release.
The package has existed since 2018 but has had no release in the last 12 months, indicating a slower release cadence. Active repository work partly compensates because type definitions may not need frequent releases.
The repository name does not match the package and its README does not mention @types/oauth, creating some ownership ambiguity. The package README explicitly points to the corresponding DefinitelyTyped types/oauth location, which partly addresses that concern.
All seven workflows were analyzed, all 25 action references are pinned, and no untrusted checkouts, script injection, or top-level write permissions were found. Four medium-confidence template-injection findings remain as workflow hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @types/node Version * | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 8 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.