AWS SDK for JavaScript Acm Client for Node.js, Browser and React Native
91%
Total Score
healthy
Frequent releases, active AWS-backed maintenance, and strong package documentation outweigh the monorepo README mismatch.
No build attestation or trusted-publisher provenance was provided, leaving publication provenance less transparent, but the package has strong independent maintenance and release evidence.
The repository name does not match this client package, which is ordinary for a monorepo, but its README does not mention @aws-sdk/client-acm; that leaves a small package-to-repository transparency gap.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10170 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @aws-sdk/client-acm is vulnerable to Insertion of Sensitive Information into Log File in versions 3.349.0 - 3.610.0. | 3.349.0 - 3.610.0 | Low |
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.6.2 | — | — |
@smithy/core Version ^3.35.2 | — | — |
@aws-sdk/core Version ^3.978.3 | — | — |
@smithy/types Version ^4.19.0 | — | — |
@aws-sdk/types Version ^3.974.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.