Auth category of aws-amplify
91%
Total Score
healthy
Healthy—active AWS-backed maintenance and frequent releases outweigh limited workflow-audit concerns.
No build attestation or trusted-publisher provenance is present, leaving publication integrity less transparent than it could be despite the package's active project backing.
The audit covered 30 of 39 workflows and found no untrusted checkouts or script injection, with all 35 action references pinned. However, high-confidence secrets-inherit findings and several ad hoc package installs are real workflow hygiene concerns, and the incomplete coverage limits assurance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.5.0 | — | — |
@smithy/types Version ^3.3.0 | — | — |
@aws-crypto/sha256-js Version 5.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.