[](https://www.npmjs.com/package/@aws-sdk/url-parser) [](https://www.npmjs.com/package/@aws-sdk/url-parser)
18%
Total Score
critical
Unfit to use: npm deprecated this package and directs users to @smithy/url-parser.
The entire package is deprecated, with npm stating that it has moved to @smithy/url-parser; this is a direct reason not to adopt this release.
The package has had no releases in over three years, despite 83 releases historically. Active repository work partly offsets abandonment concerns, but this package itself is no longer receiving releases.
The linked repository name does not match the package and its README does not mention the package, so the package-to-repository relationship is less transparent; its AWS monorepo context partly explains the mismatch.
All 11 workflows were analyzed with no audit findings, no untrusted checkouts, and no script injections. Seven of 22 action references are unpinned and one workflow has top-level write permissions, leaving minor hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.5.0 | — | — |
@smithy/url-parser Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.