npmsigned

better-auth

signed attestation (https://slsa.dev/provenance/v1)

view on npm

verification card

signals

licenseMIT

sigstoresigned

downloads / 30d25,403,381

known vulnerabilities (osv)22

top advisories

GHSA-2vg6-77g8-24mpmediumBetter Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows
GHSA-36rg-gfq2-3h56mediumBetter Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes
GHSA-392p-2q2v-4372mediumBetter Auth: OAuth refresh-token rotation forks the token family on concurrent redemption

paired skills

implexa skills that declare this module

implexa

9.2module pair

magic link auth

add passwordless magic-link authentication with better-auth: issue, email, verify, session. trigger on "add login", "passwordless auth", "magic link", or "let users sign in".

by @implexa

verified 2026-08-16

report an issue