18%
Total Score
63
100
50
The entire package is marked deprecated with a message stating it is no longer supported, and no replacement is provided. This is a severe adoption risk despite other positive signals.
No build attestation or staged publishing is present, so the origin of the published artifact cannot be independently verified. The trusted publisher identity provides some context but does not compensate for the missing attestation.
The published artifact has no README, leaving consumers without package-level usage guidance. The absence of tests and a changelog is normal for a published artifact and is not treated as a gap here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@openauthjs/openauth Version ^0.4.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.