Package Health Score

51 / 100

security
No known security issues
popularity
Small
maintenance
Inactive
community
Sustainable

Explore Similar Packages

Security

No known security issues

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version				Vulnerabilities	License Risk
4.0.0-beta1	\|	11/2019		0 C 0 H 0 M 0 L	0 H 0 M 0 L
3.1.7	\|	11/2019	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L
2.2.1	\|	10/2016		0 C 0 H 0 M 0 L	0 H 0 M 0 L
1.1.14	\|	05/2016		0 C 0 H 0 M 0 L	0 H 0 M 0 L
1.0.9	\|	04/2016		0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Small

Weekly Downloads (6,132)

GitHub Stars: 400
Forks: 111
Contributors: 20

Direct Usage Popularity

The npm package redux-oidc receives a total of 6,132 downloads a week. As such, we scored redux-oidc popularity level to be Small.

Based on project statistics from the GitHub repository for the npm package redux-oidc, we found that it has been starred 400 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Sustainable

Readme.md: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 20
Funding: No

With more than 10 contributors for the redux-oidc repository, this is possibly a sign for a growing and inviting community.

We found a way for you to contribute to the project! Looks like redux-oidc is missing a Code of Conduct.

Embed Package Health Score Badge

Maintenance

Inactive

Commit Frequency

No Recent Commits

Open Issues: 22
Open PR: 19
Last Release: 5 years ago
Last Commit: 2 years ago

Further analysis of the maintenance status of redux-oidc based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for redux-oidc is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: not defined

Age: 9 years
Dependencies: 0 Direct
Versions: 72
Install Size: 353 kB
Dist-tags: 1
# of Files: 22
Maintainers: 1
TS Typings: Yes

redux-oidc has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

redux-oidc

A package for managing OpenID-Connect authentication in ReactJS / Redux apps. It wraps the popular oidc-client library to redux actions and reducers.

Description

This package handles OpenID-Connect authentication in redux apps. It enables redux apps to authenticate with an external OIDC authentication provider and handles the actions of the OpenID implicit flow or authorization code flow.

It uses the oidc-client-js library to manage OpenID Connect functionality.

It contains the following parts:

CallbackComponent: A react component processing the signin callback from the OpenID-Connect provider,
SignoutCallbackComponent: A react component processing the signout callback from the OpenID-Connect provider,
reducers & actions: reducers and actions to handle OIDC events,
helpers: create helpers to manage the oidc-client-js library

Installation

npm install --save redux-oidc

Peer dependencies

This package wraps oidc-client-js to use with ReactJS / Redux apps. Install oidc-client like this:

npm install --save oidc-client

In addition there is a peer dependency for immutable.js, if you want to use it.

babel-polyfill

You need the babel-polyfill in your build configuration for this package to work.

Version 4 released

BREAKING CHANGE: immutable is no longer a dependency. If you are using the immutable reducer, please check out the docs.

Documentation

You can find the docs for version 3 here:

Note for react-native users

This library doesn't fully support react-native apps. Please use this library instead.

Version 2

Check out the wiki for further information for Version 2 (deprecated).

Sample app

There is a sample application demonstrating the use of this package here.

Tests

You have to install immutableJS for all the tests to pass: npm install immutable --no-save. Then run npm run test.

FAQs

What is redux-oidc?

A package for managing OpenID Connect authentication in redux apps. Visit Snyk Advisor to see a full health score report for redux-oidc, including popularity, security, maintenance & community analysis.

Is redux-oidc popular?

The npm package redux-oidc receives a total of 6,132 weekly downloads. As such, redux-oidc popularity was classified as small. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is redux-oidc well maintained?

We found indications that redux-oidc is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is redux-oidc safe to use?

The npm package redux-oidc was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 22 December-2024, at 08:37 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP