Reading the repo — stats and the shipped feed land in about ten seconds…
A deterministic 0–100 hygiene score — README, license, CI, tests, docs, and freshness.
Who ships this repo — author concentration and the bus factor across the last 300 mainline commits.
How welcoming this repo is to contributors — issue throughput, close time, responsiveness, and good-first-issue count.
What this project is built on — dependency count by ecosystem, the license mix, and anything worth a legal look before you adopt it.
Whether this project's CI can be trusted — pass rate, run times, flaky runs, and which workflow is the weak link.
Grounded in next-auth's README, structure, and recent commits — answers won't invent code they haven't seen.
A Monday email with what shipped, in plain English — no account needed.
Fix TypeScript type annotations
Corrected return type annotations in the Neon and PostgreSQL adapters to properly indicate that `useVerificationToken` can return `null` when no matching row is found, matching the Adapter contract. Also pinned TypeScript version in docs to 5.6.3 to ensure typedoc builds deterministically with a supported compiler version.
Fixed proxy Vercel deployment
Added a vercel.json configuration to prevent Vercel from auto-detecting and running Turbo builds on the proxy package, which was causing deployment failures. The proxy deploys as Vercel Functions and doesn't need a build step.
Updated dependencies across packages
Resolved 167 Dependabot security alerts by upgrading major versions of critical dependencies including Next.js (15.5.18), Svelte (5.55.7), Vitest (3.2.6), Vite (6.4.2), and numerous other libraries across docs, apps, and core packages. This includes security fixes for packages like jsonwebtoken, socks, and micromatch that were blocking previous dependency updates.
A floor, not a guess: counts only commits whose author, co-author trailer, or message explicitly credits an AI tool (Claude, Copilot, Cursor, aider, Codex…). Based on 30 mainline commits. Unattributed AI code isn't counted here — the full audit estimates that separately.
