@aws-sdk/signature-v4

Registry deprecationdanger

npm marks the entire package deprecated and says it has moved to @smithy/signature-v4. This directly makes the assessed release unsuitable for a new dependency despite the absence of a release-specific withdrawal.

Release historycaution

The package has 142 releases and historically released about every 7 days, but its latest release was in July 2023 with no releases in the last 12 months. This supports the migration signal and indicates the package line is no longer advancing.

Repo toolingcaution

The repository uses established build and test tooling, but no security scanning tools were detected. The active project and clean workflow audit provide some compensation, though security-tooling coverage is incomplete.

Workflow auditcaution

All 11 workflows were analyzed with no reported findings or untrusted checkouts; nine scope permissions at the job level. Seven of 22 action references are unpinned and one workflow has top-level write permissions, but these are limited hygiene concerns without an identified exploit path.