@aws-lambda-powertools/logger

The logging package for the Powertools for AWS Lambda (TypeScript) library

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

dreamorosiaws-powertools-bot

awslambdapowertoolsloggerloggingserverlessnodejs

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): Legitimate maintainer transition within the AWS Lambda Powertools team; dreamorosi is a known long-standing contributor.	ai	2026/04/23
maintainer-change	maintainer-added	AI (maintainer-change): am29d is a known AWS Powertools contributor; adding team members is routine for this project.	ai	2026/04/23
license	uncommon-license:MIT-0	AI (license): MIT-0 is Amazon's standard open-source license used across all AWS Lambda Powertools packages. Not a risk signal for this package family.	ai	2026/04/21
dependencies	unvetted-dep:@aws-lambda-powertools/commons	AI (dependencies): Sibling package in the same AWS Lambda Powertools monorepo, published at the same version. Expected dependency pattern for this package family.	ai	2026/04/21

View all versions

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.