@aws-sdk/dynamodb-codec
This is an internal dependency used with `@aws-sdk/client-dynamodb`. You should not take a direct dependency on this package.
88%
Total Score
healthy
Frequent releases and active AWS-backed development make this a well-maintained package, though it is intended for internal use.
Health Score Breakdown
The repository name does not match the package and its README does not mention the package, which can make package-to-source ownership less transparent. The repository is an organization-owned AWS SDK monorepo, which makes a subpackage name mismatch plausible and partly compensates for the gap.
The repository uses established build and test tooling, including TypeScript, Vitest, and multiple bundlers. No security scanning tools were reported, which is a modest transparency gap but not enough to outweigh the active project evidence.
All 12 workflows were analyzed with no audit findings, untrusted checkouts, or script injection. Seven of 24 action references are unpinned and one workflow has top-level write permissions, creating a mild hygiene concern without an untrusted trigger or sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.6.2 | — | — |
@smithy/core Version ^3.35.2 | — | — |
@aws-sdk/core Version ^3.978.3 | — | — |
@smithy/types Version ^4.19.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 10 months ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.