Skip to content

Conversation

mandarini
Copy link

@mandarini mandarini commented Aug 29, 2025

What kind of change does this PR introduce?

Feature - Package consolidation and multi-package publishing

What is the current behavior?

Currently, @supabase/ssr is only published under its own package name. Meanwhile, the deprecated @supabase/auth-helpers-* packages continue to receive thousands of weekly downloads, probably due to LLMs recommending them in code suggestions despite being deprecated for a long time.

The deprecated packages:

  • @supabase/auth-helpers-nextjs (159k weekly downloads)
  • @supabase/auth-helpers-react
  • @supabase/auth-helpers-remix
  • @supabase/auth-helpers-sveltekit

What is the new behavior?

This PR enables @supabase/ssr to be published under multiple package names simultaneously:

  1. Multi-package publishing: The release workflow now publishes the same codebase under 5 different npm package names:

    • @supabase/ssr (primary package)
    • @supabase/auth-helpers-nextjs
    • @supabase/auth-helpers-react
    • @supabase/auth-helpers-remix
    • @supabase/auth-helpers-sveltekit
  2. Console warnings: When imported as a deprecated auth-helpers package, users see a prominent warning.

  3. Updated documentation: README clearly explains the package consolidation and lists all deprecated packages.

Additional context

Users of the old auth-helpers packages will experience breaking changes when updating, as the APIs are not backward compatible. This is intentional - as discussed internally, we want to "break it loudly" to force users to notice and migrate.

Why this approach?

  • LLMs continue to recommend deprecated packages despite deprecation warnings
  • Traditional deprecation methods have proven ineffective
  • Publishing SSR under the old names ensures users get the maintained, working code
  • Console warnings guide users to the correct package

Related: supabase/auth-helpers#811

@mandarini mandarini force-pushed the feat/auth-helpers-release branch from af085d9 to 3eb87ae Compare August 29, 2025 13:26
@mandarini mandarini marked this pull request as ready for review August 29, 2025 13:42
@mandarini mandarini force-pushed the feat/auth-helpers-release branch from 3eb87ae to 68da49a Compare August 29, 2025 13:43
@mandarini mandarini changed the title feat!: publish SSR under deprecated auth-helpers package names feat: publish SSR under deprecated auth-helpers package names Aug 29, 2025
@mandarini mandarini force-pushed the feat/auth-helpers-release branch from 68da49a to b8a0358 Compare August 29, 2025 13:47
@mandarini mandarini self-assigned this Aug 29, 2025
@mandarini mandarini requested a review from hf August 29, 2025 13:47
@j4w8n
Copy link
Contributor

j4w8n commented Aug 29, 2025

I assume that if we're going to "break it loudly" then we're also going to shout it from the rooftops loudly one last time?? If I recall from past discussions, posts, etc, there are devs using the deprecated packages for targeted reasons - the react one specifically comes to mind but I may be mistaking it for the nextjs version.

Perhaps the "pre-LLM" devs have all migrated away by now, but if we're gonna up-and-break folks then I'd recommend treading empathetically on this one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants