[](https://www.npmjs.com/package/@aws-sdk/util-buffer-from) [](https://www.npmjs.com/package/@aws
20%
Total Score
100
100
71
83
The entire package is deprecated on npm and its stated replacement is @smithy/util-buffer-from, making this release unsuitable for a new dependency despite other healthy project signals.
The package has 57 releases and a historically regular median interval of about 13 days, but it has had no releases in the last 12 months, consistent with its deprecated status.
The linked repository neither matches the package name nor mentions it in its README, which creates some package-to-repository attribution uncertainty, although the organization-owned monorepo context partly compensates.
All 11 workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection; seven of 22 action references are unpinned and one workflow has top-level write permissions, leaving minor hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.5.0 | — | — |
@smithy/util-buffer-from Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.