auth0-js
3
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
auth0-ossauth0npmauth0brokkrjesseleoktajeffoktajeffbsmith-auth0sanjay.manikandhanniltorresatkohenry.mcardlenicolas.villalobosadam-mcgrath_oktajosecarlos-chavez_atkotj.oktasgarcia-atkoroger.chanmaaantonelewisbyrne-oktatarunpreet.kaur
Keywords
auth0authopenidauthenticationjwtbrowser
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): Okta/Auth0 org maintainer rotation, consistent with legitimate ownership. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Established SDK resuming release cadence with CI/CD provenance, not a takeover pattern. | ai | |
| phantom-deps | phantom-dep:minimist | AI (phantom-deps): minimist is explicitly declared in package.json dependencies; phantom-dep heuristic misfires here. | ai |