← Home

@clerk/nextjs

npm Repository Homepage

Clerk SDK for NextJS

49
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

colinclerkbradenclerknikosdouvlisjescalanbrkalow-clerkdominic-clerk

Keywords

clerktypescriptnextjsauthauthenticationpasswordlesssessionjwt

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/cjs/vendor/crypto-es.js AI (source-diff): Bundled crypto-es vendor (tsup output), standard minification not obfuscation. ai
source-diff obfuscated-file:dist/esm/vendor/crypto-es.js AI (source-diff): Bundled crypto-es vendor (tsup output), standard minification not obfuscation. ai
maintainer-change maintainer-removed AI (maintainer-change): Routine maintainer rotation within trusted Clerk org. ai
maintainer-change maintainer-added AI (maintainer-change): Clerk org monorepo maintainer rotation, not a takeover indicator. ai
publish-pattern new-deps-added AI (publish-pattern): @clerk/react is first-party rename of @clerk/clerk-react within same org. ai
phantom-deps phantom-dep:tslib AI (phantom-deps): Known implicit runtime dep, common false positive. ai
dependencies unvetted-dep:@clerk/shared AI (dependencies): @clerk/shared is a first-party Clerk internal package within the same @clerk/ namespace; expected dependency for all Clerk SDKs. ai
typosquat typosquat.levenshtein:next AI (typosquat): @clerk/nextjs is the official Clerk SDK for Next.js, not a typosquat. The scoped namespace, age, and download volume confirm legitimacy. This rule will always fire due to edit distance and is a stable false positive. ai
dependencies unvetted-dep:@clerk/backend AI (dependencies): @clerk/backend is a first-party Clerk internal package within the same @clerk/ namespace; expected dependency for all Clerk SDKs. ai

Versions (showing 49 of 49)

Version Deps Published
7.6.2 5 / 2
7.6.1 5 / 2
7.6.0 5 / 2
7.5.22 5 / 2
7.5.21 5 / 2
7.5.20 5 / 2
7.5.19 5 / 2
7.5.18 5 / 2
7.5.17 5 / 2
7.5.16 5 / 2
7.5.15 5 / 2
7.5.14 5 / 2
7.5.13 5 / 2
7.5.12 5 / 2
7.5.11 5 / 2
7.5.10 5 / 2
7.5.9 5 / 2
7.5.8 5 / 2
7.5.7 5 / 2
7.5.6 5 / 2
7.5.5 5 / 2
7.5.4 5 / 2
7.5.3 5 / 2
7.5.2 5 / 2
7.5.1 5 / 2
7.5.0 5 / 2
7.4.3 5 / 2
7.4.2 5 / 2
7.4.1 5 / 2
7.4.0 5 / 2
7.3.7 5 / 2
7.3.6 5 / 2
7.3.5 5 / 2
7.3.4 5 / 2
7.3.3 5 / 2
7.3.2 5 / 2
7.3.1 5 / 2
7.3.0 5 / 2
7.2.9 5 / 2
7.2.8 5 / 2
7.2.7 5 / 2
7.2.6 5 / 2
7.2.5 5 / 2
7.2.4 5 / 2
6.39.6 6 / 2
6.39.5 6 / 2
6.39.4 6 / 2
6.39.3 6 / 2
5.7.6 7 / 7

v7.6.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.6.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.6.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.22

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.17

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.16

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.12

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.5.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.3.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.3.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.3.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.3.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.3.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.3.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.2.9

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.2.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.2.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.2.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.2.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.2.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.39.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v6.39.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v5.7.6

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.