@aws-sdk/credential-provider-imds

Package scaffoldingdanger

The artifact includes a README, and the README explicitly describes the package as internal and recommends using @aws-sdk/credential-providers instead. Repository tests and a changelog provide project-level support, but they do not make this deprecated entry a suitable direct dependency.

Registry deprecationdanger

The package is explicitly deprecated at package scope and has moved to @smithy/credential-provider-imds, making this release unsuitable for a new dependency despite the active project behind it.

Release historydanger

This package has 140 historical releases but none in the last 12 months; its latest release was in July 2023, which is consistent with the package having been superseded.

Dependency profilecaution

The package has only two runtime dependencies, but one is the replacement package @smithy/credential-provider-imds, reinforcing that this package is a transitional or superseded wrapper rather than a good direct dependency choice.

Token permissionscaution

Most workflows lack top-level permissions and one declares read-only permissions, but one workflow has top-level write access and several rely on job-level permissions; this is a minor workflow-hygiene concern rather than the deciding risk.