
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
@clerk/astro
Advanced tools
Changelog · Report a Bug · Request a Feature · Get help
Clerk is the easiest way to add authentication and user management to your Astro application. Add sign up, sign in, and profile management to your application in minutes.
>=18.17.0 or laterThe fastest way to get started with Clerk is by following the Astro Quickstart.
You'll learn how to install @clerk/astro, set up your environment keys, add the clerk() integration to your application, use the Clerk middleware, and use Clerk's prebuilt components.
For further information, guides, and examples visit the Astro reference documentation.
You can get in touch with us in any of the following ways:
We're open to all community contributions! If you'd like to contribute in any way, please read our contribution guidelines and code of conduct.
@clerk/astro follows good practices of security, but 100% security cannot be assured.
@clerk/astro is provided "as is" without any warranty. Use at your own risk.
For more information and to report security issues, please refer to our security documentation.
This project is licensed under the MIT license.
See LICENSE for more information.
FAQs
Clerk SDK for Astro
The npm package @clerk/astro receives a total of 4,196 weekly downloads. As such, @clerk/astro popularity was classified as popular.
We found that @clerk/astro demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Research
/Security News
Malicious Rust crate evm-units disguised as an EVM version helper downloads and silently executes OS-specific payloads likely aimed at crypto theft.