cdk-assets
CDK Asset Publishing Tool
86%
Total Score
healthy
Active AWS-backed maintenance and strong release history outweigh workflow hygiene concerns.
Health Score Breakdown
All 19 workflows were analyzed and use job-level permissions, with no top-level write permissions; however, 84 of 190 action references are unpinned, and the audit found high-confidence adhoc package installs plus low-confidence github-env warnings in integ.yml. The untrusted checkouts occur in workflows with pull_request_target or workflow_run triggers, so this remains a workflow-hygiene caution rather than a standalone severe finding.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 6 years ago
- Unpacked Size
- 5.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.