@aws-crypto/util

Release historydanger

The latest registry release was in October 2023, with no releases in the following two years and eleven releases overall; this indicates meaningful maintenance risk despite the previously regular cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent repository push elsewhere provides some evidence of ongoing project presence, but not current development of this package.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, although 25 pull requests remain open. This supports a picture of limited recent activity rather than proving abandonment.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @aws-crypto/util. Because the repository contains a larger package tree, this may be normal monorepo structure, but package ownership is less transparent.

Workflow auditcaution

All 10 analyzed action references are unpinned, and a high-confidence low-severity finding reports an ad-hoc package installation in the production release workflow. Four workflows use read-only permissions and there are no untrusted checkout or script-injection findings, which limits the risk.