@aws-sdk/hash-stream-node

Registry deprecationdanger

The entire package is deprecated, with the registry stating that it has moved to @smithy/hash-stream-node. This is a severe adoption risk even though the source project remains active.

Release historycaution

There have been 0 releases in the last 12 months, but the package has 126 releases over nearly 8 years and is now explicitly deprecated, which explains the cessation rather than indicating unexplained abandonment.

Repo package mentioncaution

The linked monorepo neither matches the package name nor mentions it in its README, which weakens package-to-repository traceability. The organization-backed monorepo context partly compensates, but the mismatch remains a caution.

Workflow auditcaution

All 11 workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. Seven of 22 action references are unpinned and one workflow has top-level write permissions, so workflow hygiene is not perfect but is not independently severe.