prisma-better-auth-nextjs
Audited by Socket on Feb 25, 2026
1 alert found:
SecurityThe artifact appears to be a legitimate, comprehensive scaffold and guide for adding authentication to a Next.js app using Prisma and Better Auth. No direct indicators of deliberate malicious code are present in the supplied documentation. Primary risks are operational and supply-chain: executing remote tooling (npx, unreviewed Python scripts), mishandling high-value secrets, and misconfiguring deployment/proxy/logging which can expose credentials or PII. Recommended actions: pin and audit remote CLI packages before running, review any scaffold scripts before execution, store secrets in a dedicated secrets manager and use least-privilege credentials, validate audit-log sanitization and trusted proxy configuration, and restrict DIRECT_URL usage to trusted CI or migration tooling.