@aws-sdk/hash-stream-node
The package is clearly licensed, typed, and backed by an active AWS repository with recent commits, tests, and release tooling. Use @smithy/hash-stream-node instead, as the registry marks this package deprecated and identifies that migration.
18%
Total Score
100
100
75
83
Health Score Breakdown
The entire package is deprecated, with the registry stating that it has moved to @smithy/hash-stream-node. This is a severe adoption risk even though the source project remains active.
There have been 0 releases in the last 12 months, but the package has 126 releases over nearly 8 years and is now explicitly deprecated, which explains the cessation rather than indicating unexplained abandonment.
The linked monorepo neither matches the package name nor mentions it in its README, which weakens package-to-repository traceability. The organization-backed monorepo context partly compensates, but the mismatch remains a caution.
All 11 workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. Seven of 22 action references are unpinned and one workflow has top-level write permissions, so workflow hygiene is not perfect but is not independently severe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.5.0 | — | — |
@smithy/hash-stream-node Version ^1.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 7 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.