@octokit/auth-oauth-app 9.0.1

GitHub OAuth App authentication for JavaScript

@octokit/auth-oauth-app@9.0.1 was published on 2025-05-20. Its manifest declares 5 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >= 20.

All @octokit/auth-oauth-app versions · Permanent reference to 9.0.1 · Latest release

Package specifications

Version	9.0.1
License declaration	MIT
Published	2025-05-20T14:31:38.184Z
Node.js requirement	>= 20
Type declarations	Bundled declarations
Runtime dependency count	5
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	46.26 KiB
Published file count	14
Package type	module
ES module entry	Not declared
Default entry	Not declared
Side effects declaration	false
Direct advisories	0
Resolved graph dependencies	19
Repository stars	76
Repository forks	15

Install @octokit/auth-oauth-app 9.0.1

npm install @octokit/auth-oauth-app@9.0.1
pnpm add @octokit/auth-oauth-app@9.0.1
yarn add @octokit/auth-oauth-app@9.0.1

Runtime dependencies

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@octokit/auth-oauth-device@8.0.5 — direct
@octokit/auth-oauth-user@6.0.4 — direct
@octokit/request@10.0.16 — direct
@octokit/types@14.1.0 — direct
universal-user-agent@7.0.3 — direct
@octokit/oauth-methods@6.0.5 — indirect
@octokit/types@18.0.0 — indirect
@octokit/types@18.0.0 — indirect
@octokit/endpoint@11.0.5 — indirect
@octokit/request-error@7.1.2 — indirect
@octokit/types@18.0.0 — indirect
content-type@3.1.1 — indirect
json-with-bigint@3.5.12 — indirect
@octokit/openapi-types@25.1.0 — indirect
@octokit/oauth-authorization-url@8.0.0 — indirect
@octokit/types@18.0.0 — indirect
@octokit/openapi-types@29.0.1 — indirect
@octokit/types@18.0.0 — indirect
@octokit/types@18.0.0 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Security-Policy	9/10 — security policy file detected
Maintained	5/10 — 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	5/10 — dependency not pinned by hash detected -- score normalized to 5
Code-Review	10/10 — all changesets reviewed
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Packaging	10/10 — packaging workflow detected
SAST	9/10 — SAST tool detected but not run on all commits

Evidence and freshness

https://registry.npmjs.org/%40octokit%2Fauth-oauth-app/9.0.1 — retrieved 2026-10-30T17:31:14.675Z
https://api.deps.dev/v3/projects/github.com%2Foctokit%2Fauth-oauth-app.js — retrieved 2026-10-30T15:04:45.455Z
https://api.deps.dev/v3/systems/npm/packages/%40octokit%2Fauth-oauth-app/versions/9.0.1 — retrieved 2026-10-30T17:31:15.100Z
https://api.deps.dev/v3/systems/npm/packages/%40octokit%2Fauth-oauth-app/versions/9.0.1:dependencies — retrieved 2026-10-30T17:31:15.142Z