This package provides functions to generate signed urls and cookies for accessing private content on CloudFront based on a CloudFront trusted key group key pair.
90%
Total Score
healthy
Active AWS-backed maintenance and frequent releases are strong, but build attestation is absent and the repository does not name this package.
No build attestation or trusted-publisher provenance is present, leaving an avoidable gap in verifying how the published artifact was produced.
The repository name does not match the package and its README does not mention it, creating some uncertainty about package-to-repository linkage; the monorepo structure partly explains the name mismatch but not the missing mention.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.6.2 | — | — |
@smithy/core Version ^3.35.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.