I haven’t been able to find any kind of documented intention or policy around how long the old versions of the nextjs-auth0 SDK/package will be maintained and supported. Is 1.x currently being maintained/supported? Is there an expected EOL for older SDKs or package versions? (specifically nextjs-auth0 1.x). I would like to use this information to make a decision about prioritization of the upgrade to 3.x.
I spoke to the team, here’s the summary of their response:
We don’t have an official support schedule for old versions of the nextjs-auth0 SDK and wouldn’t expect v1.x to receive any updates unless there was some necessary justification like a major vulnerability, or something of that nature.
Thanks for looking into that!
Sounds like it won’t be improved or maintained for new compatibility, etc, but any major security issue would probably still be addressed… for at least a while. Appreciate knowing that.