OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
88%
Total Score
60
100
100
100
100
Only one registry account, panva, has publish access. This is a continuity concern, although the repository and release history show that the account is actively maintaining the project.
The repository is owned by the individual user panva rather than an organization, so the concentrated maintainer and commit activity is not offset by evident organizational handoff capacity.
There was one contributor with a 100% commit share over the last three months, creating a genuine single-maintainer continuity risk without organization backing or a second active contributor.
The repository recorded 24 commits in the last three months, demonstrating recent development, but all activity came from one active maintainer.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jose Version ^6.2.12 | — | — |
oauth4webapi Version ^3.8.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.