
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@convex-dev/better-auth
Advanced tools
Use Better Auth with Convex 🔥
[!IMPORTANT] The Convex Better Auth component is in early alpha development.
If your use case isn't supported, a plugin doesn't work, you hit a bug, etc, please open a GitHub issue or reach out on Discord.
Full documentation and guides: 👉 convex-better-auth.netlify.app
Note: The examples are not starters - the dependencies are set up to work locally within this repo. They can be adapted for standalone use, but are intentionally not set up for it.
Note: Examples on the main branch use the alpha release. If you're not
installing the alpha, use the latest branch for docs and examples matching
the latest stable release.
npm install
cd examples/<example-name>
npm install
npx convex dev --once
npm run dev
If you're making changes to the component, open a separate terminal and run the build watch task
npm run build:watch
FAQs
A Better Auth component for Convex.
The npm package @convex-dev/better-auth receives a total of 7,555 weekly downloads. As such, @convex-dev/better-auth popularity was classified as popular.
We found that @convex-dev/better-auth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.