All 89 Dependencies

Every package Hanko depends on, ranked by repo health score.

Hanko is an open source authentication and user management platform built for developers who want modern, secure auth without vendor lock-in. It supports the full spectrum of authentication methods — passkeys (WebAuthn/FIDO2), email passcodes, passwords, MFA (TOTP and security keys), OAuth SSO with social providers, and SAML 2.0 for enterprise identity providers — all configurable through a single, lightweight API.

At its core, Hanko uses a custom state machine engine called FlowPilot that models authentication journeys as discrete, resumable flows persisted in the database. This architecture makes login and registration experiences configurable and reliable across distributed environments, with built-in flow locking via Redis to prevent race conditions. The backend is written in Go and designed for cloud-native deployment via Docker or Kubernetes.

Hanko ships Preact-based web components (Hanko Elements) that register as standard custom elements, making them framework-agnostic and embeddable in any frontend stack with two lines of code. A companion JavaScript SDK handles API communication and session state for teams building fully custom UIs. Available for self-hosting or as a fully managed service via Hanko Cloud.

38 useragent v1.3.5 41 mapstructure v1.5.0 41 sjson v1.2.5 43 gock v1.2.0 43 otp v1.5.0 45 envconfig v1.4.0 45 json-patch v5.9.11 45 jsonschema v0.14.0 45 uuid v1.6.0 46 structs v1.1.0 48 errors v0.9.1 49 cookie-parser ^1.4.6 49 cors ^2.8.6 51 go-limiter v1.1.0 outdated 52 redigo v1.9.3 52 ts-node ~10.9.2 53 Cobra v1.10.2 56 classnames ^2.3.2 57 style-loader ^3.3.2 outdated 58 jiti ^2.7.0 58 node-fetch ^3.2.6 60 glob v0.2.3 outdated 62 go-oidc v3.20.0 63 go-i18n v2.6.1 63 pq v1.12.3 63 tslib ^2.8.1 65 css-loader ^7.1.4 66 zerolog v1.35.1 67 etree v1.7.0 outdated 67 gjson v1.19.0 outdated 68 node-jwks-rsa ^4.0.1 69 eslint-config-prettier ^8.5.0 outdated 70 Dockertest v3.12.0 72 redsync v4.17.0 outdated 73 eslint-plugin-prettier ^4.0.0 outdated 74 Gofakeit v6.28.0 outdated 74 testify v1.11.1 outdated 76 uuid v4.4.0+incompatible 78 dotenv ^17.4.1 outdated 79 RxJS ~7.8.2 81 koanf v1.0.0 outdated 81 koanf v1.1.0 outdated 81 koanf v1.2.1 outdated 81 koanf v1.0.0 outdated 81 koanf v2.3.5 outdated 81 sass-loader ^16.0.7 outdated 82 js-cookie ^3.0.8 84 pgx v4 v5.10.0 85 Go-MySQL-Driver v1.10.0 outdated 85 validator v10.30.3 outdated 86 @vitejs/plugin-vue ^6.0.7 87 webauthn v0.10.2 outdated 89 jwx v2.1.7 outdated 90 Express ^5.2.1 90 vue-tsc ^3.2.6 91 Faker ^7.2.0 outdated 91 Sass ^1.100.0 91 prettier ^2.7.1 outdated 92 @vitejs/plugin-react 5.1.4 outdated 92 Playwright ^1.25.0 93 Echo v4.15.4 outdated 93 webpack-cli ^7.0.3 94 Vite ^6.4.1 outdated 94 jest ^30.3.0 94 jest ^29.7.0 outdated 94 typescript-eslint ^5.28.0 outdated 94 typescript-eslint ^5.28.0 outdated 95 AWS SDK for Go v2 v1.32.30 outdated 95 AWS SDK for Go v2 v1.54.1 95 ESLint ^8.17.0 outdated 95 React Router 7.17.0 outdated 95 TypeScript ^4.7.3 outdated 95 Vue ^3.5.31 95 Vue Router ^5.0.4 95 preact ^10.28.4 outdated 96 Next.js ^16.2.6 97 webpack ^5.106.1 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ~0.16.2 outdated 98 React ^18.3.1 outdated 98 React DOM ^18.3.1 outdated

Join founders buildingwith open source

Opinionated takes, migration guides, cost-saving tips, and insights from the open source ecosystem.

Subscribe on Substack
Join 750+ subscribers