npmpackage.info

Gathering detailed insights and metrics for @aws-amplify/auth

Other packages similar to @aws-amplify/auth

@aws-amplify/graphql-auth-transformer

Amplify GraphQL @auth transformer

@aws-amplify/amplify-category-auth

amplify-cli authentication plugin

@aws-amplify/backend-auth

This package contains the `defineAuth` entry point for customers to define auth in their Amplify backend. This is a layer on top of the auth construct in `@aws-amplify/auth-construct` to initialize the construct in the context of an Amplify backend

@aws-amplify/auth-construct

This package vends an L3 CDK Construct that enables faster, easier and secure app authentication and authorization powered by Amazon Cognito. Amplify Auth lets you quickly set up secure authentication flows with a fully-managed user directory. Control wha

@aws-amplify/auth

A declarative JavaScript library for application development using cloud services.

6.10.1

9,473

Apache-2.0

TypeScript

31.90 kB

140,396,597 7.2

Installations

npm install @aws-amplify/auth

Developer Guide

BETA

Typescript

No

Module System

CommonJS, ESM

Node Version

18.20.2

NPM Version

lerna/7.4.2/node@v18.20.2+x64 (linux)

Score

97.7

Supply Chain

75.4

Quality

99.7

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

52

Total

5,254

Closed

1,002

Merged

4,200

Issues

Open

503

Total

6,631

Closed

6,128

Releases

173

2025-01-24 Amplify JS release - aws-amplify@6.12.2

aws-amplify@6.12.2

Published on 24 Jan 2025

2025-01-14 Amplify JS release - aws-amplify@6.12.1

aws-amplify@6.12.1

Published on 14 Jan 2025

2025-01-02 Amplify JS release - aws-amplify@6.12.0

aws-amplify@6.12.0

Published on 03 Jan 2025

2024-12-19 Amplify JS release - aws-amplify@6.11.0

aws-amplify@6.11.0

Published on 20 Dec 2024

2024-12-12 Amplify JS release - aws-amplify@6.10.3

aws-amplify@6.10.3

Published on 13 Dec 2024

2024-12-10 Amplify JS release - aws-amplify@5.3.27

aws-amplify@5.3.27

Published on 11 Dec 2024

View all 173 releases

Contributors

471

View all 471 contributors

Languages

10

TypeScript

C

JavaScript

Kotlin

Swift

Objective-C

Java

Ruby

Shell

Objective-C++

TypeScript (92.79%)

C (3.61%)

JavaScript (1.23%)

Kotlin (1.1%)

Swift (0.47%)

Objective-C (0.46%)

Java (0.12%)

Ruby (0.1%)

Shell (0.09%)

Objective-C++ (0.03%)

Developer

Download Statistics

Total Downloads

140,396,597

Last Day

162,246

Last Week

722,292

Last Month

3,265,886

Last Year

41,716,390

GitHub Statistics

9,473 Stars

9,839 Commits

2,143 Forks

211 Watching

98 Branches

471 Contributors

Bundle Size

128.18 kB

Minified

31.90 kB

Minified + Gzipped

Bundlephobia

Maintainers

9

Package Meta Information

Latest Version

6.10.1

Package Id

@aws-amplify/auth@6.10.1

Unpacked Size

3.00 MB

Size

458.36 kB

File Count

1,303

NPM Version

lerna/7.4.2/node@v18.20.2+x64 (linux)

Node Version

18.20.2

Publised On

24 Jan 2025

Total Downloads

Cumulative downloads

Total Downloads

140,396,597

Last day

-6.1%

162,246

Compared to previous day

Last week

-15.8%

722,292

Compared to previous week

Last month

2%

3,265,886

Compared to previous month

Last year

16.7%

41,716,390

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

3

@aws-crypto/sha256-js @smithy/types tslib

Peer Dependencies

1

@aws-amplify/core

Dev Dependencies

4

@aws-amplify/core @aws-amplify/react-native @jest/test-sequencer typescript

Versions

INTERNAL USE ONLY

This package contains the AWS Amplify Auth category and is intended for internal use only. To integrate Amplify into your app, please use aws-amplify.

Empty State

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

10

SAST

Determines if the project uses static code analysis.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

6

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

6

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

Reason

detected GitHub workflow tokens with excessive permissions

Details

Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:18
Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:19
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/push-latest-release.yml:18
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/push-lts-release.yml:21
Info: jobLevel 'contents' permission set to 'read': .github/workflows/snyk-security.yml:16
Info: jobLevel 'actions' permission set to 'read': .github/workflows/snyk-security.yml:18
Warn: no topLevel permission defined: .github/workflows/aws-amplify-dependency-check.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-bundle-size-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-canary-e2e-runner.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-canary-e2e-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-canary-e2e.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-canary-sampleapp-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-dependency-review.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-e2e-test-detox.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-e2e-test-headless.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-e2e-test.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-e2e-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-get-package-list.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-npm-publish-lts-release.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-npm-publish-preid.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-npm-publish-release.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-prebuild-amplify-js.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-prebuild-samples-staging.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-release-verification.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-test-github-actions.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-test-license.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-test-tsc-compliance.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-unit-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/codeql.yml:1
Warn: no topLevel permission defined: .github/workflows/issue-comment.yml:1
Warn: no topLevel permission defined: .github/workflows/issue-labeled.yml:1
Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1
Warn: no topLevel permission defined: .github/workflows/lock.yaml:1
Warn: no topLevel permission defined: .github/workflows/on-schedule-canary-test.yml:1
Info: topLevel permissions set to 'read-all': .github/workflows/pr.yml:9
Warn: no topLevel permission defined: .github/workflows/push-integ-test.yml:1
Warn: no topLevel permission defined: .github/workflows/push-latest-release.yml:1
Warn: no topLevel permission defined: .github/workflows/push-lts-release.yml:1
Warn: no topLevel permission defined: .github/workflows/push-main-release.yml:1
Warn: no topLevel permission defined: .github/workflows/push-next-release.yml:1
Warn: no topLevel permission defined: .github/workflows/push-preid-release.yml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/snyk-security.yml:10

0

Fuzzing

Determines if the project uses fuzzing.

Score

7.2

/10

Last Scanned on 2025-01-27

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.