Is this project dead?

[fabrice-toussaint]

@jaredhanson there are quite a lot of PRs open as I can see (also from a long time ago). Is this project still actively maintained?

[markstos]

Looking at the network graph, there are multiple forks with active updates and releases. A couple include:

https://www.npmjs.com/package/@govtechsg/passport-openidconnect
https://www.npmjs.com/package/deskfy-passport-openidconnect

I'm not vouching for the security of any of the forks, but this is often the way that open source software projects to stay alive and maintained, as others use the rights the license and source code access grants them to fix their own bugs and publish their own releases.

It would be great if some of these forks could come together and collaborate as a team on a single, higher quality project. That, unfortunately, is less common in open source

[YasharF]

@fabrice-toussaint did you encounter an issue when using the module? I just tried it, and it worked just fine.

[markstos]

After evaluating options myself, I eventually used openid-client directly, which worked very well and was well-documented. Another option that's not Passport-based is express-openid-connect. That one is a good fit if the only auth you have for your app is via OIDC.