The Apache-2.0 license, bundled TypeScript declarations, and 65,221-character README support straightforward use. Workflow auditing found no high- or medium-severity issues, while the repository’s package naming mismatch is a minor transparency caveat.
94%
Total Score
100
100
94
100
The linked repository neither matches the package name nor mentions it in its README, which creates a minor package-to-source transparency concern. Its AWS organizational context and extensive monorepo tree partly reduce that concern, but the signal remains cautionary.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.6.2 | — | — |
@smithy/core Version ^3.35.0 | — | — |
@aws-sdk/core Version ^3.978.1 | — | — |
@smithy/types Version ^4.19.0 | — | — |
@aws-sdk/types Version ^3.974.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.