aws/aws-sdk-php

Clear licensing, release notes, and security policy support straightforward adoption. The main limitation is concentrated automation-led contribution, though seven active contributors and organization backing reduce handoff risk.

Latest 3.396.0

Packagist

94%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

One automation account made about 83% of the 151 recent commits, which concentrates activity; however, six other contributors were active and the project is backed by an organization.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-292173 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. aws/aws-sdk-php is vulnerable to Path Traversal in versions 3.27.0 - 3.388.11.	3.27.0 - 3.388.11	Medium
CVE-2025-14761 aws/aws-sdk-php is vulnerable to Use of a Broken or Risky Cryptographic Algorithm in versions 0.0.0 - 3.368.0.	0.0.0 - 3.368.0	Medium
AIKIDO-2024-10163 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. aws/aws-sdk-php is vulnerable to Insertion of Sensitive Information into Log File in versions 3.272.0 - 3.315.5.	3.272.0 - 3.315.5	Low
CVE-2023-51651 aws/aws-sdk-php is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 3.288.1.	0.0.0 - 3.288.1	Medium

Package versions

Maintainers

Amazon Web Services

Direct Dependencies

Dependency	Last Release	Score
aws/aws-crt-php Version ^1.2.3	—	—
guzzlehttp/psr7 Version ^2.6.3 \|\| ^3.0	—	—
psr/http-message Version ^1.0 \|\| ^2.0	—	—
guzzlehttp/guzzle Version ^7.8.2 \|\| ^8.0	—	—
symfony/filesystem Version ^v5.4.45 \|\| ^v6.4.3 \|\| ^v7.1.0 \|\| ^v8.0.0	—	—