better-auth 1.3.9
The most comprehensive authentication library for TypeScript.
better-auth@1.3.9 was published on 2025-09-08. Its manifest declares 12 runtime dependencies and 3 peer requirements. Type declarations are bundled according to the package metadata. No Node.js engine requirement is declared in this manifest.
All better-auth versions · Permanent reference to 1.3.9 · Latest release
Package specifications
| Version | 1.3.9 |
|---|---|
| License declaration | MIT |
| Published | 2025-09-08T19:22:32.274Z |
| Node.js requirement | Not declared |
| Type declarations | Bundled declarations |
| Runtime dependency count | 12 |
| Peer requirement count | 3 |
| Optional dependency count | 0 |
| Minified size | Measurement not available yet |
| Minified + gzip | Measurement not available yet |
| Unpacked distribution size | 15712.50 KiB |
| Published file count | 381 |
| Package type | module |
| ES module entry | ./dist/index.mjs |
| Default entry | ./dist/index.cjs |
| Side effects declaration | Not declared |
| Direct advisories | 15 |
| Resolved graph dependencies | 37 |
| Repository stars | 30487 |
| Repository forks | 3020 |
Install better-auth 1.3.9
npm install better-auth@1.3.9 pnpm add better-auth@1.3.9 yarn add better-auth@1.3.9
Runtime dependencies
- zod ^4.1.5
- defu ^6.1.4
- jose ^6.1.0
- kysely ^0.28.5
- nanostores ^0.11.4
- better-call 1.0.18
- @noble/hashes ^2.0.0
- @noble/ciphers ^2.0.0
- @better-auth/utils 0.2.6
- @better-fetch/fetch ^1.1.18
- @simplewebauthn/server ^13.1.2
- @simplewebauthn/browser ^13.1.2
Peer requirements
- react ^18.0.0 || ^19.0.0 (optional peer)
- react-dom ^18.0.0 || ^19.0.0 (optional peer)
- @lynx-js/react * (optional peer)
Optional dependencies
- None declared
Resolved dependency graph
This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.
- @better-auth/utils@0.2.6 — direct
- @better-fetch/fetch@1.3.3 — direct
- @hexagon/base64@1.1.28 — indirect
- @levischuck/tiny-cbor@0.2.11 — indirect
- @noble/ciphers@2.4.0 — direct
- @noble/hashes@2.4.0 — direct
- @peculiar/asn1-android@2.11.1 — indirect
- @peculiar/asn1-cms@2.11.1 — indirect
- @peculiar/asn1-csr@2.11.1 — indirect
- @peculiar/asn1-ecc@2.11.1 — indirect
- @peculiar/asn1-pfx@2.11.1 — indirect
- @peculiar/asn1-pkcs8@2.11.1 — indirect
- @peculiar/asn1-pkcs9@2.11.1 — indirect
- @peculiar/asn1-rsa@2.11.1 — indirect
- @peculiar/asn1-schema@2.11.1 — indirect
- @peculiar/asn1-x509@2.11.1 — indirect
- @peculiar/asn1-x509-attr@2.11.1 — indirect
- @peculiar/utils@2.0.3 — indirect
- @peculiar/x509@1.14.3 — indirect
- @simplewebauthn/browser@13.3.0 — direct
- @simplewebauthn/server@13.3.3 — direct
- asn1js@3.1.0 — indirect
- better-call@1.0.18 — direct
- defu@6.1.7 — direct
- jose@6.2.13 — direct
- kysely@0.28.18 — direct
- nanostores@0.11.4 — direct
- pvtsutils@1.3.6 — indirect
- pvutils@1.2.0 — indirect
- reflect-metadata@0.2.2 — indirect
- rou3@0.5.1 — indirect
- set-cookie-parser@2.7.3 — indirect
- tslib@1.14.1 — indirect
- tslib@2.8.1 — indirect
- tsyringe@4.10.0 — indirect
- uncrypto@0.1.3 — indirect
- zod@4.6.7 — direct
How to interpret the specifications
Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.
Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.
Known direct advisories
Evidence and freshness
- https://registry.npmjs.org/better-auth/1.3.9 — retrieved 2026-10-31T08:39:18.154Z
- https://api.deps.dev/v3/projects/github.com%2Fbetter-auth%2Fbetter-auth — retrieved 2026-10-31T06:04:52.260Z
- https://api.deps.dev/v3/systems/npm/packages/better-auth/versions/1.3.9 — retrieved 2026-10-31T08:39:18.612Z
- https://api.deps.dev/v3/systems/npm/packages/better-auth/versions/1.3.9:dependencies — retrieved 2026-10-31T08:39:18.642Z