nextauthjs/next-auth
Authentication for the Web.
28.4k stars · 4k forks · TypeScript
Healthy
Healthy: maintained by 4 people in the last 90 days, no known risks.
Why
No rule fired.
What would change this
- A dormant maintenance status, a deprecated or archived package, a successor link, or a critical advisory would change this.
Maintenance
CompleteSteady
- Human commits, 30 days
- 0
- Human commits, 90 days
- 6
- Human commits, 365 days
- 30
- Bot share of commits, 365 days
- 6%
- Last commit
- Jul 22, 2026 (2 months ago)
- Last human commit
- Jul 22, 2026 (2 months ago)
- Authors, 90 days
- 4
- Last release
- Jul 20, 2026 (2 months ago)
- Median PR merge time
- 12 hours
Responsiveness: of 13 recent issues, 0% got a maintainer reply. Median first response: n/a.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 30 since Oct 14, 2025
- Authors for half of commits
- 2
- Authors for 80% of commits
- 7
- Contributors
- 455
Top committers
- Bekacru: 37% of commits
- gustavovalverde: 17% of commits
- himself65: 10% of commits
- bytaesu: 7% of commits
- aidankmcalister: 3% of commits
Sources: Commits, Contributors
Stars
CompleteMostly organic, confidence high
Bursts
- Jun 22, 2020 to Jun 27, 2020: about 574 more stars than usual, peak 339 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- Feb 28, 2021 to Mar 1, 2021: about 323 more stars than usual, peak 289 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- Dec 14, 2022 to Dec 19, 2022: about 187 more stars than usual, peak 59 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Dec 30, 2022 to Dec 31, 2022: about 118 more stars than usual, peak 112 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
- Jan 4, 2023 to Jan 5, 2023: about 173 more stars than usual, peak 122 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Oct 19, 2023 to Oct 20, 2023: about 151 more stars than usual, peak 141 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- 5 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- Some star bursts have no matching forks, issues, releases, or launch coverage.
- Anyone can buy stars for any repo, so this describes the star history only.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- ISC (OSI-approved)
- A year ago
- ISC (OSI-approved)
Packages
No published packages found.
OpenSSF Scorecard: 6.0 out of 10 (via deps.dev).
Sources: GitHub: nextauthjs/next-auth
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/nextauthjs/next-auth)Earlier verdicts
- Oct 14, 2026: Healthy
- Oct 14, 2026: Healthy
Computed 9 hours ago · method 2026.10.2