Package Health

openid-client

OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

Latest 6.8.8NPMNPM

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

60

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Health Score Breakdown

Maintainerscaution

Only one registry account, panva, has publish access. This is a continuity concern, although the repository and release history show that the account is actively maintaining the project.

Project backingcaution

The repository is owned by the individual user panva rather than an organization, so the concentrated maintainer and commit activity is not offset by evident organizational handoff capacity.

Repo bus factorcaution

There was one contributor with a 100% commit share over the last three months, creating a genuine single-maintainer continuity risk without organization backing or a second active contributor.

Repo commit activitycaution

The repository recorded 24 commits in the last three months, demonstrating recent development, but all activity came from one active maintainer.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
jose
Version ^6.2.12
—
—
oauth4webapi
Version ^3.8.8
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
10 years ago
Unpacked Size
0.3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform