npmpackage.info

Gathering detailed insights and metrics for @aws-amplify/auth

Gathering detailed insights and metrics for @aws-amplify/auth

@aws-amplify/auth

A declarative JavaScript library for application development using cloud services.

6.10.1

9,468

Apache-2.0

TypeScript

31.90 kB

139,841,843 7.2

Installations

npm install @aws-amplify/auth

Developer Guide

BETA

Typescript

No

Module System

CommonJS, ESM

Node Version

18.20.2

NPM Version

lerna/7.4.2/node@v18.20.2+x64 (linux)

Score

97.7

Supply Chain

75.4

Quality

99.7

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

56

Total

5,247

Closed

1,000

Merged

4,191

Issues

Open

503

Total

6,627

Closed

6,124

Releases

173

2025-01-24 Amplify JS release - aws-amplify@6.12.2

aws-amplify@6.12.2

Published on 24 Jan 2025

2025-01-14 Amplify JS release - aws-amplify@6.12.1

aws-amplify@6.12.1

Published on 14 Jan 2025

2025-01-02 Amplify JS release - aws-amplify@6.12.0

aws-amplify@6.12.0

Published on 03 Jan 2025

2024-12-19 Amplify JS release - aws-amplify@6.11.0

aws-amplify@6.11.0

Published on 20 Dec 2024

2024-12-12 Amplify JS release - aws-amplify@6.10.3

aws-amplify@6.10.3

Published on 13 Dec 2024

2024-12-10 Amplify JS release - aws-amplify@5.3.27

aws-amplify@5.3.27

Published on 11 Dec 2024

View all 173 releases

Contributors

475

View all 475 contributors

Languages

10

TypeScript

C

JavaScript

Kotlin

Objective-C

Swift

Java

Ruby

Shell

Objective-C++

TypeScript (92.78%)

C (3.62%)

JavaScript (1.23%)

Kotlin (1.1%)

Objective-C (0.47%)

Swift (0.47%)

Java (0.12%)

Ruby (0.1%)

Shell (0.09%)

Objective-C++ (0.03%)

Developer

Download Statistics

Total Downloads

139,841,843

Last Day

167,538

Last Week

858,940

Last Month

3,066,308

Last Year

41,794,346

GitHub Statistics

9,468 Stars

9,830 Commits

2,142 Forks

212 Watching

96 Branches

475 Contributors

Bundle Size

128.18 kB

Minified

31.90 kB

Minified + Gzipped

Bundlephobia

Maintainers

9

Package Meta Information

Latest Version

6.10.1

Package Id

@aws-amplify/auth@6.10.1

Unpacked Size

3.00 MB

Size

458.36 kB

File Count

1,303

NPM Version

lerna/7.4.2/node@v18.20.2+x64 (linux)

Node Version

18.20.2

Publised On

24 Jan 2025

Total Downloads

Cumulative downloads

Total Downloads

139,841,843

Last day

0.5%

167,538

Compared to previous day

Last week

0.9%

858,940

Compared to previous week

Last month

-15.1%

3,066,308

Compared to previous month

Last year

17.3%

41,794,346

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

3

@aws-crypto/sha256-js @smithy/types tslib

Peer Dependencies

1

@aws-amplify/core

Dev Dependencies

4

@aws-amplify/core @aws-amplify/react-native @jest/test-sequencer typescript

Versions

INTERNAL USE ONLY

This package contains the AWS Amplify Auth category and is intended for internal use only. To integrate Amplify into your app, please use aws-amplify.

Empty State

No vulnerabilities found.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

10

SAST

Determines if the project uses static code analysis.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

6

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

6

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

Reason

detected GitHub workflow tokens with excessive permissions

Details

Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:18
Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:19
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/push-latest-release.yml:18
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/push-lts-release.yml:21
Info: jobLevel 'actions' permission set to 'read': .github/workflows/snyk-security.yml:18
Info: jobLevel 'contents' permission set to 'read': .github/workflows/snyk-security.yml:16
Warn: no topLevel permission defined: .github/workflows/aws-amplify-dependency-check.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-bundle-size-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-canary-e2e-runner.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-canary-e2e-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-canary-e2e.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-canary-sampleapp-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-dependency-review.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-e2e-test-detox.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-e2e-test-headless.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-e2e-test.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-e2e-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-get-package-list.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-npm-publish-lts-release.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-npm-publish-preid.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-npm-publish-release.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-prebuild-amplify-js.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-prebuild-samples-staging.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-release-verification.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-test-github-actions.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-test-license.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-test-tsc-compliance.yml:1
Warn: no topLevel permission defined: .github/workflows/callable-unit-tests.yml:1
Warn: no topLevel permission defined: .github/workflows/codeql.yml:1
Warn: no topLevel permission defined: .github/workflows/issue-comment.yml:1
Warn: no topLevel permission defined: .github/workflows/issue-labeled.yml:1
Warn: no topLevel permission defined: .github/workflows/issue-opened.yml:1
Warn: no topLevel permission defined: .github/workflows/lock.yaml:1
Warn: no topLevel permission defined: .github/workflows/on-schedule-canary-test.yml:1
Info: topLevel permissions set to 'read-all': .github/workflows/pr.yml:9
Warn: no topLevel permission defined: .github/workflows/push-integ-test.yml:1
Warn: no topLevel permission defined: .github/workflows/push-latest-release.yml:1
Warn: no topLevel permission defined: .github/workflows/push-lts-release.yml:1
Warn: no topLevel permission defined: .github/workflows/push-main-release.yml:1
Warn: no topLevel permission defined: .github/workflows/push-next-release.yml:1
Warn: no topLevel permission defined: .github/workflows/push-preid-release.yml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/snyk-security.yml:10

0

Fuzzing

Determines if the project uses fuzzing.

Score

7.2

/10

Last Scanned on 2025-01-20

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.