# @loopback/security

> A LoopBack component for security support.

Latest version **0.12.16** (published 2026-08-18) · MIT license · 0 weekly downloads

## Install

```sh
npm install @loopback/security
pnpm add @loopback/security
yarn add @loopback/security
bun add @loopback/security
```

## Health

**Score 65/100 (B)** — status: active.

Positive: has types; no vulnerabilities; recently updated; high maintenance score; high quality score.

Warnings: low downloads; no esm support; pre 1.0.

## Facts

| | |
|---|---|
| Version | 0.12.16 |
| Published | 2026-08-18 |
| First published | 2019-09-03 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | bundled |
| Module format | CommonJS |
| Node | 20 \|\| 22 \|\| 24 |
| Dependencies | 2 |
| Unpacked size | 22 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 5107 |
| Author | IBM Corp. and LoopBack contributors |
| Maintainers | rfeng, rmg, dhmlau, theprez, frbuceta, marioestradarosa, achrinza |
| Keywords | LoopBack, Security |

## Links

- npm: https://www.npmjs.com/package/@loopback/security
- Repository: https://github.com/loopbackio/loopback-next
- Homepage: https://github.com/loopbackio/loopback-next#readme
- Issues: https://github.com/loopbackio/loopback-next/issues
- npm.io page: https://npm.io/package/@loopback/security

## Dependencies (2)

- [debug](https://npm.io/package/debug.md) ^4.4.3
- [tslib](https://npm.io/package/tslib.md) ^2.8.1

## Recent versions

- 0.12.16 (latest) — 2026-08-18
- 0.12.15 — 2026-07-16
- 0.12.14 — 2026-06-11
- 0.12.13 — 2026-05-12
- 0.12.12 — 2026-04-14
- 0.12.11 — 2026-03-11
- 0.12.10 — 2026-02-10
- 0.12.9 — 2026-01-12
- 0.12.8 — 2025-12-09
- 0.12.7 — 2025-11-11
- 0.12.6 — 2025-10-15
- 0.12.5 — 2025-09-10
- 0.12.4 — 2025-08-11
- 0.12.3 — 2025-07-15
- 0.12.2 — 2025-06-13
- … 88 more at https://npm.io/package/@loopback/security/versions

## README

# @loopback/security

Common types/interfaces for LoopBack 4 security including authentication and
authorization.

## Installation

```shell
npm install --save @loopback/security
```

## Overview

- Subject
  - It's the "who" for security
  - contains a set of Principles, a set of Credentials, and a set of Permissions
- Principle
  - Represent a user, an application, or a device
- Credential
  - Security attributes used to authenticate the subject. Such credentials
    include passwords, Kerberos tickets, and public key certificates.
- Permission
  - It's the `what` for security.

![Overview](security-overview-diagram.png)

## Basic use

## Contributions

- [Guidelines](https://github.com/loopbackio/loopback-next/blob/master/docs/CONTRIBUTING.md)
- [Join the team](https://github.com/loopbackio/loopback-next/issues/110)

## Tests

run `npm test` from the root folder.

## Contributors

See
[all contributors](https://github.com/loopbackio/loopback-next/graphs/contributors).

## License

MIT

---
_Source: https://npm.io/package/@loopback/security · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._