npmpackage.info

supertokens-website

Frontend SDK for SuperTokens - for session management + automatically refreshing sessions

20.1.5

NOASSERTION

JavaScript

Installations

npm install supertokens-website

Pull Requests

Open

10

Total

186

Closed

22

Merged

154

Issues

Open

20

Total

81

Closed

61

Releases

v20.1.5

Published on 31 Oct 2024

v20.1.4

Published on 23 Jul 2024

v20.1.3

Published on 10 Jul 2024

v20.1.2

Published on 04 Jul 2024

v20.1.1

Published on 17 Jun 2024

v20.1.0

Published on 10 Jun 2024

View all 49 releases

Developer

supertokens

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

No

Node Version

14.17.6

NPM Version

6.14.15 Statistics

54 Stars

717 Commits

13 Forks

12 Watching

43 Branches

15 Contributors

Updated on 31 Oct 2024

Languages

JavaScript (77.45%)

TypeScript (20.27%)

Shell (1.75%)

HTML (0.28%)

Dockerfile (0.25%)

Total Downloads

Cumulative downloads

Total Downloads

2,022,175

Last day

20.1%

6,028

Compared to previous day

Last week

12.9%

28,341

Compared to previous week

Last month

16.8%

108,209

Compared to previous month

Last year

55.1%

1,087,240

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

To use SuperTokens with your own custom UI refer to our plain Javascript SDK supertokens-web-js

For any queries, or support requests, please email us at team@supertokens.com, or join our Discord server.

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

License

Determines if the project has defined a license.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/github-actions-changelog.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/supertokens/supertokens-website/github-actions-changelog.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/github-actions-changelog.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/supertokens/supertokens-website/github-actions-changelog.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-pr-title.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/supertokens/supertokens-website/lint-pr-title.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pre-commit-hook-run.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/supertokens/supertokens-website/pre-commit-hook-run.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/supertokens/supertokens-website/size-limit.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-limit.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/supertokens/supertokens-website/size-limit.yml/master?enable=pin
Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:5
Warn: containerImage not pinned by hash: test/docker/node14/Dockerfile:1: pin your Docker image by updating rishabhpoddar/supertokens_node_driver_testing to rishabhpoddar/supertokens_node_driver_testing@sha256:a578eaf1ac7ed03b7efdb1ad9c9e20eb2b7cb24c6e61744185ffe6a15e6a0e66
Warn: containerImage not pinned by hash: test/docker/node16/Dockerfile:1: pin your Docker image by updating rishabhpoddar/supertokens_node_driver_testing_node_16 to rishabhpoddar/supertokens_node_driver_testing_node_16@sha256:831edb82f906bcb6c3c0629c64eefcb0b2b65a041418d8663ef9bdee7b8fa511
Warn: npmCommand not pinned by hash: .circleci/setupAndTestWithFreeCore.sh:48
Warn: npmCommand not pinned by hash: .circleci/setupAndTestWithFreeCore.sh:49
Warn: npmCommand not pinned by hash: .github/workflows/pre-commit-hook-run.yml:20
Warn: npmCommand not pinned by hash: .github/workflows/pre-commit-hook-run.yml:20
Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 3 containerImage dependencies pinned
Info: 0 out of 4 npmCommand dependencies pinned

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

39 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-2j2x-2gpw-g8fm
Warn: Project is vulnerable to: GHSA-pw2r-vq6v-hr8c
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
Warn: Project is vulnerable to: GHSA-jv3g-j58f-9mq9
Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q
Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
Warn: Project is vulnerable to: GHSA-8cf7-32gw-wr33
Warn: Project is vulnerable to: GHSA-hjrf-2m68-5959
Warn: Project is vulnerable to: GHSA-qwph-4952-7xr6
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m / GHSA-xvch-5gv4-984h
Warn: Project is vulnerable to: GHSA-f982-mxwc-3mrx
Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j
Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp

Score

4

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to supertokens-website

@amplication/plugin-auth-supertokens

0.0.11

Use supertokens for authentication in the service generated by Amplication

supertokens-js-override

0.0.4

A small utility for implementing overrideable interfaces

browser-tabs-lock

1.3.0

provides locking mechanism to sync across browser tabs

supertokens-node

21.1.0

NodeJS driver for SuperTokens core

supertokens-website

Installations

Pull Requests

10

186

22

154

Issues

20

81

61

Releases

Developer

Developer Guide

CommonJS

No

14.17.6

6.14.15

Statistics

Languages

Total Downloads

2,022,175

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

10

10

10

9

2

0

0

0

0

0

0

0

4

/10

Other packages similar to supertokens-website