.browserslistrc

.eslintrc.json

.github

CODEOWNERS

ISSUE_TEMPLATE

Bug Report.yml

config.yml

PULL_REQUEST_TEMPLATE.md

actions

get-prerelease

action.yml

get-release-notes

get-version

npm-publish

release-create

tag-exists

dependabot.yml

stale.yml

workflows

claude-code-review.yml

codeql.yml

npm-release.yml

release.yml

snyk.yml

test.yml

.prettierignore

.prettierrc.yaml

.semgrepignore

.shiprc

.version

CHANGELOG.md

DEVELOPMENT.md

EXAMPLES.md

LICENSE

Makefile

README.md

karma.conf.js

CSSCore.js

__tests__

auth_button.js

connection

database

actions.js

index.js

login_pane.js

password_reset_confirmation.js

reset_password.js

signed_up_confirmation.js

enterprise

hrd_pane.js

hrd_screen.js

quick_auth_screen.js

passwordless

ask_vcode.js

email_sent_confirmation.js

passwordless.js

core

client

remote_data.js

signed_in_confirmation.js

last_login_screen.js

tenant.js

web_api.js

web_api

helper.js

p2_api.js

engine

classic.js

classic

login.js

mfa_login_screen.js

sign_up_pane.js

sign_up_screen.js

social_or_email_login_screen.js

social_or_phone_number_login_screen.js

field

captcha.js

captcha

arkose.js

auth0_v2.js

friendlyCaptcha.js

hcaptcha.js

recaptcha_enterprise.js

recaptchav2.js

third_party_captcha.js

custom_input.js

email.js

auth0-lock

sambego

jfromaniello

cristiandouce

jpadilla

auth0npm

mgonto

iaco

sandrinodimattia

aaguiarz

auth0-oss

auth0brokkr

davidpatrick0

glena

heyitsry

hzalaz

jessele

lzychowski

rhamzeh_auth0

sergii.biienko

stevehobbsdev

ziluvatar

ncluer

julien.wollscheid

charlesrea

david.renaud.okta

madhuri.rm23

edgarchirivella-okta

jamescgarrett-okta

stheller

pubalokta

enriquepina

sanjay.manikandhan

rithuc23

oktajeffoktajeff

soumya.bodavula

npirani_okta

sgarcia-atko

roger.chan

joshbetz_auth0

andriy0k

maaantone

jason.gervais

shafatkhan

psychoticbrat

brohowismynamealreadytaken

lewisbyrne-okta

tarunpreet.kaur

harish.sundar

bsmith-auth0

dannyturcotte

auth0-werner

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

This Chrome extension includes content scripts that execute JavaScript on specified websites.

What are Chrome extension content scripts?

Chrome: Content Script

This Chrome extension requests host permissions to access specific websites or domains.

What are Chrome extension host permissions?

Chrome: Host Permission

This Chrome extension requests permissions to access browser APIs, user data, or system features.

What are Chrome extension permissions?

Chrome: Permission

This Chrome extension requests wildcard host permissions that grant broad access to websites.

What are Chrome extension wildcard host permissions?

Chrome: Wildcard Host Permission

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

auth0-lock - npm Package File explorer