Package Health/amazon-cognito-identity-js

amazon-cognito-identity-js

Amazon Cognito Identity Provider JavaScript SDK

Latest 6.3.20

NPM

84%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo package mention

The repository name does not match the package and its README does not mention amazon-cognito-identity-js, so the package-to-repository relationship is not clearly established despite the organization-backed monorepo context.

Workflow audit

All analyzed action references are pinned and no untrusted checkout or script-injection paths were found. However, only 30 of 39 workflows were analyzed, five high-confidence secrets-inherit findings expose credentials broadly, and several workflows install packages outside lockfiles.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

amzn-oss

aws-amplify-ops

amplify-studio-uibuilder

amplify-codegen

amplify-data-dev-npm

aws-amplify-data-runtime

Direct Dependencies

Dependency	Last Release	Score
buffer Version 4.9.2	—	—
js-cookie Version ^3.0.7	—	—
fast-base64-decode Version ^1.0.0	—	—
isomorphic-unfetch Version ^3.0.0	—	—
@aws-crypto/sha256-js Version 1.2.2	—	—