google-auth-library

Google APIs Authentication Client Library for Node.js

Latest 11.2.0

NPM

90%

Total Score

healthy

Long-term releases and active, broadly contributed maintenance outweigh minor workflow hygiene concerns.

Health Score Breakdown

Lifecycle scripts

A prepare lifecycle script runs during installation. This is a modest supply-chain and installation-complexity concern, though the signal does not show harmful behavior.

Repo package mention

The linked repository name does not match google-auth-library and its README does not mention the package, creating some uncertainty about direct repository correspondence; the organization-backed monorepo context partly offsets this.

Workflow audit

All 71 analyzed action references are pinned and 17 workflows use read-only permissions, but one of 19 workflows failed analysis and two high-confidence low-severity findings install packages outside a lockfile.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

google-wombot

Direct Dependencies

Dependency	Last Release	Score
jws Version ^4.0.0	—	—
gaxios Version ^7.1.4	—	—
base64-js Version ^1.3.0	—	—
gcp-metadata Version ^9.0.0	—	—
ecdsa-sig-formatter Version ^1.0.11	—	—