All 89 Dependencies

Every package Hanko depends on, ranked by repo health score.

Hanko is an open source authentication and user management platform built for developers who want modern, secure auth without vendor lock-in. It supports the full spectrum of authentication methods — passkeys (WebAuthn/FIDO2), email passcodes, passwords, MFA (TOTP and security keys), OAuth SSO with social providers, and SAML 2.0 for enterprise identity providers — all configurable through a single, lightweight API.

At its core, Hanko uses a custom state machine engine called FlowPilot that models authentication journeys as discrete, resumable flows persisted in the database. This architecture makes login and registration experiences configurable and reliable across distributed environments, with built-in flow locking via Redis to prevent race conditions. The backend is written in Go and designed for cloud-native deployment via Docker or Kubernetes.

Hanko ships Preact-based web components (Hanko Elements) that register as standard custom elements, making them framework-agnostic and embeddable in any frontend stack with two lines of code. A companion JavaScript SDK handles API communication and session state for teams building fully custom UIs. Available for self-hosting or as a fully managed service via Hanko Cloud.

40 useragent v1.3.5 41 mapstructure v1.5.0 42 sjson v1.2.5 43 gock v1.2.0 43 otp v1.5.0 45 envconfig v1.4.0 45 json-patch v5.9.11 45 uuid v1.6.0 46 jsonschema v0.14.0 46 structs v1.1.0 48 errors v0.9.1 50 cookie-parser ^1.4.6 50 cors ^2.8.6 52 redigo v1.9.3 52 ts-node ~10.9.2 53 go-limiter v1.1.0 outdated 54 Cobra v1.10.2 54 Dockertest v3.12.0 55 tslib ^2.8.1 56 classnames ^2.3.2 58 jiti ^2.7.0 58 node-fetch ^3.2.6 60 style-loader ^3.3.2 outdated 61 eslint-plugin-prettier ^4.0.0 outdated 61 gjson v1.19.0 63 glob v0.2.3 outdated 65 go-i18n v2.6.1 66 zerolog v1.35.1 67 go-oidc v3.20.0 67 pq v1.12.3 68 eslint-config-prettier ^8.5.0 outdated 71 css-loader ^7.1.4 72 Gofakeit v6.28.0 outdated 74 etree v1.7.0 outdated 74 js-cookie ^3.0.8 74 node-jwks-rsa ^4.0.1 74 redsync v4.17.0 outdated 75 koanf v1.0.0 outdated 75 koanf v1.1.0 outdated 75 koanf v1.2.1 outdated 75 koanf v1.0.0 outdated 75 koanf v2.3.5 outdated 75 testify v1.11.1 outdated 76 uuid v4.4.0+incompatible 78 dotenv ^17.4.1 outdated 80 sass-loader ^16.0.7 outdated 81 RxJS ~7.8.2 82 Go-MySQL-Driver v1.10.0 outdated 84 validator v10.30.3 outdated 85 Express ^5.2.1 85 pgx v4 v5.10.0 87 @vitejs/plugin-vue ^6.0.7 88 jwx v2.1.7 outdated 88 webauthn v0.10.2 outdated 90 vue-tsc ^3.2.6 91 Faker ^7.2.0 outdated 91 Sass ^1.100.0 91 prettier ^2.7.1 outdated 92 Playwright ^1.25.0 93 @vitejs/plugin-react 5.1.4 outdated 93 preact ^10.28.4 93 webpack-cli ^7.0.3 94 Echo v4.15.4 outdated 94 Vite ^6.4.1 outdated 94 typescript-eslint ^5.28.0 outdated 94 typescript-eslint ^5.28.0 outdated 95 AWS SDK for Go v2 v1.32.30 outdated 95 AWS SDK for Go v2 v1.54.1 95 ESLint ^8.17.0 outdated 95 React Router 7.17.0 outdated 95 Vue Router ^5.0.4 95 jest ^30.3.0 95 jest ^29.7.0 outdated 96 Next.js ^16.2.6 96 Vue ^3.5.31 97 TypeScript ^4.7.3 outdated 97 webpack ^5.106.1 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ^21.1.5 outdated 98 @angular/core ~0.16.2 outdated 98 React ^18.3.1 outdated 98 React DOM ^18.3.1 outdated

Join founders buildingwith open source

Opinionated takes, migration guides, cost-saving tips, and insights from the open source ecosystem.

Subscribe on Substack
Join 750+ subscribers