nextauthjs/next-auth
Authentication for the Web.
GitHub(opens in a new tab)Homepage(opens in a new tab)TypeScriptISC28,365 stars
Summary
nextauthjs/next-auth — Authentication for the Web — is catalogued under Authentication and identity. As of 2026-09-16, nextauthjs/next-auth is reviewed as superseded. The upstream README states Auth.js is now part of Better Auth and recommends Better Auth for new projects, unless stateless session management without a database is required. The reviewed successor is better-auth/better-auth. Its RepoFacts health score is 88/100 (Strong; medium confidence, provisional). Its npm package next-auth averaged 794,971 downloads a day over the last 90 days, up 41% on the previous 90 days. Reviewed recommendation: keep it in existing projects only.
- Lifecycle on GitHub
- activeVerified
- Editorial status
- SupersededApproved
- Recommendation
- Existing projects onlyApproved
- Last verified
- 2026-09-161 snapshot on record
Reviewed by cmartinzip on 2026-09-16; the rationale is in the summary above. Rule-derived status would be active.
Health
88Strong
Medium confidence · evidence covers 67% of weight · provisional
Is it sustainable and safe enough to evaluate?
Momentum
Volatile
Rising: adoption. Falling: contribution.
Is attention, adoption, or contribution growing?
Stack fit
Not evaluated
Stack Fit reads a saved technology profile. It arrives with the personalized Stack Fit phase; no score is shown until then.
Does it fit your runtime, database, and deployment?
- Strongest signal. Documentation scores 100 — README: Present.
- Watch. Maintenance scores 67 — Weeks with commits (last 13): 2 of 13 weeks had commits. Includes bot commits.
Health dimensions
repofacts-health-v1| Dimension | Weight | Score | Coverage | Signals |
|---|---|---|---|---|
| Maintenance | 20% | 67 | 100% | 3 of 3 scored
|
| Security posture | 20% | 100 | 25% | 1 of 4 scored
|
| Documentation | 12% | 100 | 100% | 3 of 3 scored
|
| Stability | 12% | 100 | 100% | 3 of 3 scored
|
| Community depth | 12% | 88 | 100% | 2 of 2 scored
|
| Dependency exposure | 10% | No evidence | 0% | 0 of 2 scored
|
| Operational burden | 8% | No evidence | 0% | 0 of 1 scored
|
| Governance | 6% | 100 | 100% | 3 of 3 scored
|
Momentum signals
repofacts-momentum-v0| Signal | Window | Current | Previous | Direction | Basis |
|---|---|---|---|---|---|
| Development | 91 days | 7 commits | 16 commits | Not measured | 7 commits in the last 13 weeks vs 16 in the 13 before. Includes bot commits. Previous-window baseline 16 is below the 26 floor, so a ratio would be a small-number artefact. |
| Contribution | 90 days | 5 contributors | 6 contributors | Falling (0.83×) | 5 human contributors in the last 90 days vs 6 before. |
| Adoption | 90 days | 794,971 downloads/day | 563,399 downloads/day | Rising (1.41×) | next-auth: 794,971 downloads/day over the last 90 days vs 563,399 before. Registry counts include CI and mirrors. |
| Attention | — | — | — | Not measured | Star history accumulates from RepoFacts snapshots and needs 60 days of them. It is never reconstructed. |
Composite score withheld. A composite score is normalized within a category cohort of at least 8 repositories. This category has 2. Hidden Gem: not eligible — Composite momentum needs a category cohort of at least 8; this category has 2. Above the 5,000-star attention ceiling.
Packages
npm| Package | Latest | Identity | Downloads/day (90d) |
|---|---|---|---|
| next-auth(opens in a new tab)primary | 4.24.15 | MatchedManifest repository is nextauthjs/next-auth. | 794,971 |
| @auth/core(opens in a new tab) | 0.41.3 | MatchedManifest repository is nextauthjs/next-auth. | 571,369 |
Superseded bybetter-auth/better-authApproved
The next-auth README (read 2026-09-16) states Auth.js is now part of Better Auth and recommends Better Auth for new projects, except where stateless sessions without a database are required. Evidence(opens in a new tab)
- Is nextauthjs/next-auth still maintained?
- As of 2026-09-16, nextauthjs/next-auth is reviewed as superseded. The upstream README states Auth.js is now part of Better Auth and recommends Better Auth for new projects, unless stateless session management without a database is required. The reviewed successor is better-auth/better-auth.
- Is nextauthjs/next-auth deprecated?
- Not formally: as of 2026-09-16 GitHub does not mark nextauthjs/next-auth archived and npm does not mark next-auth deprecated, but it is reviewed as superseded. The reviewed successor is better-auth/better-auth. Reviewed recommendation: keep it in existing projects only.
- How healthy is nextauthjs/next-auth?
- Its RepoFacts health score is 88/100 (Strong; medium confidence, provisional). The main watch item: Maintenance scores 67 — Weeks with commits (last 13): 2 of 13 weeks had commits. Includes bot commits.
- How widely is nextauthjs/next-auth used?
- nextauthjs/next-auth has 28,365 GitHub stars, which measure attention rather than use. Its npm package next-auth averaged 794,971 downloads a day over the last 90 days, up 41% on the previous 90 days. Registry download counts include CI installs and mirrors. Checked 2026-09-16.
- What can I use instead of nextauthjs/next-auth?
- Reviewed relationships in Stack Atlas point to better-auth/better-auth. Compare their RepoFacts profiles before migrating.
Evidence
snapshot 2026-09-16Every value collected for this profile, with its provenance. Source links are the API endpoints that answered. Unknown and unavailable values are shown as such and never counted as zero.
| Group | Field | Value | Provenance | Source and notes |
|---|---|---|---|---|
| Repository | Archived | No | Verified | https://api.github.com/repos/nextauthjs/next-auth |
| Repository | Disabled | No | Verified | https://api.github.com/repos/nextauthjs/next-auth |
| Repository | Fork | No | Verified | https://api.github.com/repos/nextauthjs/next-auth |
| Repository | License (SPDX) | ISC | Verified | https://api.github.com/repos/nextauthjs/next-auth |
| Repository | Default branch | main | Verified | https://api.github.com/repos/nextauthjs/next-auth |
| Repository | Created | 2018-01-27 | Verified | https://api.github.com/repos/nextauthjs/next-auth |
| Repository | Last push (any branch) | 2026-07-22 | Verified | https://api.github.com/repos/nextauthjs/next-authMoves on a push to any branch; not used as a maintenance signal. |
| Repository | Metadata updated | 2026-09-16 | Verified | https://api.github.com/repos/nextauthjs/next-authMoves on metadata edits; not used as a maintenance signal. |
| Attention | Stars | 28,365 | Verified | https://api.github.com/repos/nextauthjs/next-auth |
| Attention | Forks | 4,041 | Verified | https://api.github.com/repos/nextauthjs/next-auth |
| Attention | Watchers (subscribers) | 116 | Verified | https://api.github.com/repos/nextauthjs/next-auth |
| Repository | Open issues + pull requests | 604 | Verified | https://api.github.com/repos/nextauthjs/next-authGitHub includes open pull requests in this count. |
| Activity | Latest default-branch commit | 2026-07-22 | Verified | https://api.github.com/repos/nextauthjs/next-auth/commits?sha=main&per_page=100 |
| Activity | Latest non-bot commit | 2026-07-22 | Verified | https://api.github.com/repos/nextauthjs/next-auth/commits?sha=main&per_page=100 |
| Activity | Commits, last 13 weeks | 7 | Verified | https://api.github.com/repos/nextauthjs/next-auth/stats/commit_activityAll commits on the default branch, including bot commits. |
| Activity | Human contributors, last 90 days | 5 | Verified | https://api.github.com/repos/nextauthjs/next-auth/commits?sha=main&since=2026-03-20T00%3A00%3A00.000Z&per_page=100Window 2026-03-20 → 2026-09-16Counts distinct non-bot commit authors on the default branch. Co-authors and non-commit contributions are not counted. |
| Activity | Human commits, last 90 days | 7 | Verified | https://api.github.com/repos/nextauthjs/next-auth/commits?sha=main&since=2026-03-20T00%3A00%3A00.000Z&per_page=100Window 2026-03-20 → 2026-09-16Counts distinct non-bot commit authors on the default branch. Co-authors and non-commit contributions are not counted. |
| Activity | Bot commits, last 90 days | 0 | Verified | https://api.github.com/repos/nextauthjs/next-auth/commits?sha=main&since=2026-03-20T00%3A00%3A00.000Z&per_page=100Window 2026-03-20 → 2026-09-16Counts distinct non-bot commit authors on the default branch. Co-authors and non-commit contributions are not counted. |
| Releases | Releases, last 365 days | 100 | Verified | https://api.github.com/repos/nextauthjs/next-auth/releases?per_page=100GitHub releases only. Projects that publish solely to a package registry show none here. Lower bound: pagination stopped at a cap. |
| Releases | Latest stable release | next-auth@4.24.15 (2026-07-20) | Verified | https://api.github.com/repos/nextauthjs/next-auth/releases?per_page=100GitHub releases only. Projects that publish solely to a package registry show none here. Lower bound: pagination stopped at a cap. |
| Community | GitHub community profile | 100% | Verified | https://api.github.com/repos/nextauthjs/next-auth/community/profileDetects files in the default locations GitHub checks. |
| Security | Security policy | Yes | Verified | https://api.github.com/graphqlIncludes a policy inherited from the owner's .github repository. |
| npm · next-auth | Latest version | 4.24.15 | Verified | https://registry.npmjs.org/next-auth/latestThe manifest of the version tagged `latest`, which may be a prerelease. |
| npm · next-auth | Deprecated | No | Verified | https://registry.npmjs.org/next-auth/latestThe manifest of the version tagged `latest`, which may be a prerelease. |
| npm · next-auth | Manifest repository | git+https://github.com/nextauthjs/next-auth.git | Verified | https://registry.npmjs.org/next-auth/latestThe manifest of the version tagged `latest`, which may be a prerelease. |
| npm · next-auth | Downloads/day, last 90 days | 794,971 | Verified | https://api.npmjs.org/downloads/range/2025-03-17:2026-09-15/next-authWindow 2025-03-17 → 2026-09-14Registry download counts include CI installs, mirrors, and bots. Gap days are excluded, not counted as zero. |
| npm · next-auth | Downloads/day, last 30 days | 860,639 | Verified | https://api.npmjs.org/downloads/range/2025-03-17:2026-09-15/next-authWindow 2025-03-17 → 2026-09-14Registry download counts include CI installs, mirrors, and bots. Gap days are excluded, not counted as zero. |
| npm · @auth/core | Latest version | 0.41.3 | Verified | https://registry.npmjs.org/@auth%2fcore/latestThe manifest of the version tagged `latest`, which may be a prerelease. |
| npm · @auth/core | Deprecated | No | Verified | https://registry.npmjs.org/@auth%2fcore/latestThe manifest of the version tagged `latest`, which may be a prerelease. |
| npm · @auth/core | Manifest repository | git+https://github.com/nextauthjs/next-auth.git | Verified | https://registry.npmjs.org/@auth%2fcore/latestThe manifest of the version tagged `latest`, which may be a prerelease. |
| npm · @auth/core | Downloads/day, last 90 days | 571,369 | Verified | https://api.npmjs.org/downloads/range/2025-03-17:2026-09-15/@auth/coreWindow 2025-03-17 → 2026-09-14Registry download counts include CI installs, mirrors, and bots. Gap days are excluded, not counted as zero. |
| npm · @auth/core | Downloads/day, last 30 days | 633,836 | Verified | https://api.npmjs.org/downloads/range/2025-03-17:2026-09-15/@auth/coreWindow 2025-03-17 → 2026-09-14Registry download counts include CI installs, mirrors, and bots. Gap days are excluded, not counted as zero. |
Collected 2026-09-16T21:22:40.366Z · repofacts-status-v0 · repofacts-health-v1 · repofacts-momentum-v0 · repofacts-taxonomy-v1 · inputs 040af48e9d5c
Scores are decision support, not a warranty, certification, or security audit. How RepoFacts scores repositories. Spot an error? Send a correction with a source.