oauth
Library for interacting with OAuth 1.0, 1.0A, 2 and Echo. Provides simplified client access and allows for construction of more complex apis and OAuth providers.
28
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
ciaranj
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:eval-usage | AI (semgrep): All eval() usages are in spec/lib/jspec.js, a test framework helper — not production code. Legitimate use for matcher expression evaluation in tests; not reachable by consumers. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Sparse metadata reflects the package's age (5549 days) and pre-modern npm conventions. 4.7M weekly downloads and 28 versions confirm legitimacy. | ai |
Versions (showing 28 of 28)
| Version | Deps | Published |
|---|---|---|
| 0.10.2 | 0 / 1 | |
| 0.10.1 | 0 / 1 | |
| 0.10.0 | 0 / 1 | |
| 0.9.15 | 0 / 1 | |
| 0.9.14 | 0 / 1 | |
| 0.9.13 | 0 / 1 | |
| 0.9.12 | 0 / 1 | |
| 0.9.11 | 0 / 1 | |
| 0.9.10 | 0 / 1 | |
| 0.9.9 | 0 / 1 | |
| 0.9.8 | 0 / 1 | |
| 0.9.7 | 0 / 1 | |
| 0.9.6 | 0 / 1 | |
| 0.9.5 | 0 / 1 | |
| 0.9.4 | 0 / 1 | |
| 0.9.3 | 0 / 0 | |
| 0.9.2 | 0 / 0 | |
| 0.9.1 | 0 / 0 | |
| 0.9.0 | 0 / 0 | |
| 0.8.4 | 0 / 0 | |
| 0.8.3 | 0 / 0 | |
| 0.8.2 | 0 / 0 | |
| 0.8.1 | 0 / 0 | |
| 0.8.0 | 0 / 0 | |
| 0.7.7 | 0 / 0 | |
| 0.7.6 | 0 / 0 | |
| 0.7.5 | 0 / 0 | |
| 0.7.4 | 0 / 0 |