@aws-sdk/client-eventbridge
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@smithy/core | AI (phantom-deps): Framework-scoped dependency; stable pattern in AWS SDK packages. | ai | |
| phantom-deps | phantom-dep:@aws-sdk/client-sts | AI (phantom-deps): Framework-scoped dependency; stable pattern in AWS SDK packages. | ai | |
| phantom-deps | phantom-dep:@aws-sdk/client-sso-oidc | AI (phantom-deps): Framework-scoped dependency; stable pattern in AWS SDK packages. | ai | |
| phantom-deps | phantom-dep:@smithy/middleware-stack | AI (phantom-deps): Framework-scoped dependency; stable pattern in AWS SDK packages. | ai | |
| phantom-deps | phantom-dep:@aws-sdk/middleware-stack | AI (phantom-deps): Framework-scoped internal dep loaded by convention. | ai | |
| provenance | no-provenance | AI (provenance): Common across AWS SDK packages, not a risk indicator. | ai | |
| dependencies | unvetted-dep:@aws-sdk/middleware-sdk-eventbridge | AI (dependencies): First-party AWS SDK internal dependency. | ai |
Versions (showing 100 of 627)
| Version | Deps | Published |
|---|---|---|
| 3.1096.0 | 9 / 7 | |
| 3.1095.0 | 9 / 7 | |
| 3.1094.0 | 9 / 7 | |
| 3.1093.0 | 9 / 7 | |
| 3.1092.0 | 9 / 7 | |
| 3.1091.0 | 9 / 7 | |
| 3.1090.0 | 9 / 7 | |
| 3.1089.0 | 9 / 7 | |
| 3.1088.0 | 9 / 7 | |
| 3.1087.0 | 9 / 7 | |
| 3.1086.0 | 9 / 7 | |
| 3.1085.0 | 9 / 7 | |
| 3.1084.0 | 9 / 7 | |
| 3.1083.0 | 9 / 7 | |
| 3.1082.0 | 9 / 7 | |
| 3.1081.0 | 9 / 7 | |
| 3.1080.0 | 9 / 7 | |
| 3.1079.0 | 9 / 7 | |
| 3.1078.0 | 9 / 7 | |
| 3.1077.0 | 9 / 7 | |
| 3.1076.0 | 11 / 7 | |
| 3.1075.0 | 11 / 7 | |
| 3.1074.0 | 11 / 7 | |
| 3.1073.0 | 11 / 7 | |
| 3.1072.0 | 11 / 7 | |
| 3.1071.0 | 11 / 7 | |
| 3.1070.0 | 11 / 7 | |
| 3.1069.0 | 11 / 7 | |
| 3.1068.0 | 11 / 7 | |
| 3.1067.0 | 11 / 7 | |
| 3.1066.0 | 11 / 7 | |
| 3.1065.0 | 11 / 7 | |
| 3.1064.0 | 11 / 7 | |
| 3.1063.0 | 11 / 7 | |
| 3.1062.0 | 11 / 7 | |
| 3.1061.0 | 11 / 7 | |
| 3.1060.0 | 11 / 7 | |
| 3.1059.0 | 11 / 7 | |
| 3.1058.0 | 11 / 7 | |
| 3.1057.0 | 11 / 7 | |
| 3.1056.0 | 11 / 7 | |
| 3.1055.0 | 11 / 7 | |
| 3.1054.0 | 11 / 7 | |
| 3.1053.0 | 11 / 7 | |
| 3.1052.0 | 11 / 7 | |
| 3.1051.0 | 11 / 7 | |
| 3.1050.0 | 11 / 7 | |
| 3.1049.0 | 11 / 7 | |
| 3.1048.0 | 11 / 7 | |
| 3.1047.0 | 19 / 7 | |
| 3.1046.0 | 19 / 7 | |
| 3.1045.0 | 40 / 7 | |
| 3.1044.0 | 40 / 7 | |
| 3.1043.0 | 40 / 7 | |
| 3.1042.0 | 40 / 7 | |
| 3.1041.0 | 40 / 7 | |
| 3.1040.0 | 40 / 7 | |
| 3.1039.0 | 40 / 7 | |
| 3.1038.0 | 40 / 7 | |
| 3.1037.0 | 40 / 7 | |
| 3.1036.0 | 40 / 7 | |
| 3.1035.0 | 40 / 7 | |
| 3.1034.0 | 40 / 7 | |
| 3.1033.0 | 40 / 7 | |
| 3.1032.0 | 40 / 7 | |
| 3.1031.0 | 40 / 7 | |
| 3.1030.0 | 40 / 7 | |
| 3.1029.0 | 40 / 7 | |
| 3.1028.0 | 40 / 7 | |
| 3.1027.0 | 40 / 7 | |
| 3.1026.0 | 40 / 7 | |
| 3.1025.0 | 40 / 7 | |
| 3.1024.0 | 40 / 7 | |
| 3.1023.0 | 40 / 7 | |
| 3.1022.0 | 40 / 7 | |
| 3.1021.0 | 40 / 7 | |
| 3.1020.0 | 40 / 7 | |
| 3.1019.0 | 40 / 7 | |
| 3.1018.0 | 40 / 7 | |
| 3.1017.0 | 40 / 7 | |
| 3.1016.0 | 40 / 7 | |
| 3.1015.0 | 40 / 7 | |
| 3.1014.0 | 40 / 7 | |
| 3.1013.0 | 40 / 7 | |
| 3.1012.0 | 40 / 7 | |
| 3.1011.0 | 40 / 7 | |
| 3.1010.0 | 40 / 7 | |
| 3.1009.0 | 40 / 7 | |
| 3.1008.0 | 40 / 7 | |
| 3.1007.0 | 40 / 7 | |
| 3.1006.0 | 40 / 7 | |
| 3.1005.0 | 40 / 7 | |
| 3.1004.0 | 40 / 7 | |
| 3.1003.0 | 40 / 7 | |
| 3.1002.0 | 40 / 7 | |
| 3.1001.0 | 40 / 7 | |
| 3.1000.0 | 40 / 7 | |
| 3.999.0 | 40 / 7 | |
| 3.998.0 | 40 / 7 | |
| 3.997.0 | 40 / 7 |
v3.1096.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1095.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1094.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1093.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1092.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1091.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1090.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1089.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1088.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1087.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1086.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1085.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1084.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1083.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1082.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1081.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1080.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1079.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1078.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1077.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.1076.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.