Package Health

aws-sdk

AWS SDK for JavaScript

Latest 2.1693.0NPMNPM

12%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

58

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecationdanger

The entire package is marked deprecated because AWS SDK for JavaScript v2 reached end-of-support and no longer receives updates; the recommended replacement is v3. This is a severe maintenance and abandonment risk for a new dependency.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last 3 months, consistent with the stated end-of-support status. The historical project scale does not offset the lack of current maintenance.

Repository archiveddanger

The linked aws/aws-sdk-js repository is archived, confirming that active development has ended. Its final push does not compensate for the archived status.

Release historycaution

This is a mature package with 1,968 releases over more than 13 years, but only one release occurred in the last 12 months. The long history supports maturity, not ongoing support.

Workflow auditcaution

All four workflows were analyzed with no reported audit findings, no untrusted checkouts, and no script injection. All four action references are unpinned, which is a hygiene caution but not the reason this release is unfit.

Vulnerabilities

TitleVersionsSeverity
CVE-2020-28472
aws-sdk is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 2.814.0.
0.0.0 - 2.814.0
High

Package versions

Direct Dependencies

DependencyLast ReleaseScore
sax
Version 1.2.1
—
—
url
Version 0.10.3
—
—
util
Version ^0.12.4
—
—
uuid
Version 8.0.0
—
—
buffer
Version 4.9.2
—
—

Weekly Downloads

Info

Last Published
10 months ago
Created
13 years ago
Unpacked Size
93.7 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform