@aws-sdk/lib-dynamodb
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@aws-sdk/util-dynamodb | AI (dependencies): @aws-sdk/util-dynamodb is a sibling package in the official aws/aws-sdk-js-v3 monorepo, published by the same aws-sdk-bot publisher. Not a real risk. | ai | |
| phantom-deps | phantom-dep:tslib | AI (phantom-deps): tslib is a standard TypeScript runtime helper listed in dependencies; phantom-dep detection is a false positive for this well-known pattern. | ai |
Versions (showing 100 of 644)
| Version | Deps | Published |
|---|---|---|
| 3.845.0 | 6 / 7 | |
| 3.844.0 | 6 / 7 | |
| 3.840.0 | 6 / 7 | |
| 3.839.0 | 6 / 7 | |
| 3.835.0 | 6 / 7 | |
| 3.830.0 | 6 / 7 | |
| 3.828.0 | 6 / 7 | |
| 3.826.0 | 6 / 7 | |
| 3.825.0 | 6 / 7 | |
| 3.823.0 | 6 / 7 | |
| 3.821.0 | 6 / 7 | |
| 3.817.0 | 6 / 7 | |
| 3.816.0 | 6 / 7 | |
| 3.814.0 | 6 / 7 | |
| 3.812.0 | 6 / 7 | |
| 3.810.0 | 6 / 7 | |
| 3.808.0 | 6 / 7 | |
| 3.806.0 | 6 / 7 | |
| 3.804.0 | 6 / 7 | |
| 3.803.0 | 6 / 7 | |
| 3.799.0 | 6 / 7 | |
| 3.798.0 | 6 / 7 | |
| 3.797.0 | 6 / 7 | |
| 3.796.0 | 6 / 7 | |
| 3.789.0 | 6 / 7 | |
| 3.788.0 | 6 / 7 | |
| 3.787.0 | 6 / 7 | |
| 3.786.0 | 6 / 7 | |
| 3.782.0 | 6 / 7 | |
| 3.778.0 | 6 / 7 | |
| 3.777.0 | 6 / 7 | |
| 3.775.0 | 6 / 7 | |
| 3.774.0 | 6 / 7 | |
| 3.772.0 | 6 / 7 | |
| 3.767.0 | 6 / 7 | |
| 3.758.0 | 6 / 7 | |
| 3.751.0 | 6 / 7 | |
| 3.750.0 | 6 / 7 | |
| 3.749.0 | 6 / 7 | |
| 3.744.0 | 6 / 7 | |
| 3.743.0 | 6 / 7 | |
| 3.741.0 | 6 / 7 | |
| 3.738.0 | 6 / 7 | |
| 3.734.0 | 6 / 7 | |
| 3.733.0 | 6 / 7 | |
| 3.731.1 | 6 / 7 | |
| 3.731.0 | 6 / 7 | |
| 3.730.0 | 6 / 7 | |
| 3.726.1 | 6 / 7 | |
| 3.726.0 | 6 / 7 | |
| 3.724.0 | 6 / 7 | |
| 3.723.0 | 6 / 7 | |
| 3.721.0 | 6 / 7 | |
| 3.716.0 | 6 / 7 | |
| 3.714.0 | 6 / 7 | |
| 3.713.0 | 6 / 7 | |
| 3.712.0 | 6 / 7 | |
| 3.709.0 | 6 / 7 | |
| 3.705.0 | 6 / 7 | |
| 3.704.0 | 6 / 7 | |
| 3.699.0 | 6 / 7 | |
| 3.698.0 | 6 / 7 | |
| 3.696.0 | 6 / 7 | |
| 3.693.0 | 6 / 7 | |
| 3.692.0 | 6 / 7 | |
| 3.691.0 | 6 / 7 | |
| 3.689.0 | 6 / 7 | |
| 3.687.0 | 6 / 7 | |
| 3.686.0 | 6 / 7 | |
| 3.685.0 | 6 / 7 | |
| 3.682.0 | 6 / 7 | |
| 3.679.0 | 6 / 7 | |
| 3.678.0 | 6 / 7 | |
| 3.677.0 | 6 / 7 | |
| 3.675.0 | 6 / 7 | |
| 3.674.0 | 6 / 7 | |
| 3.670.0 | 6 / 7 | |
| 3.669.0 | 5 / 7 | |
| 3.668.0 | 5 / 7 | |
| 3.667.0 | 5 / 7 | |
| 3.666.0 | 5 / 7 | |
| 3.665.0 | 5 / 7 | |
| 3.664.0 | 5 / 7 | |
| 3.662.0 | 5 / 7 | |
| 3.658.1 | 5 / 7 | |
| 3.658.0 | 5 / 7 | |
| 3.656.0 | 5 / 7 | |
| 3.654.0 | 5 / 7 | |
| 3.651.1 | 5 / 7 | |
| 3.650.0 | 5 / 7 | |
| 3.649.0 | 5 / 7 | |
| 3.648.0 | 5 / 7 | |
| 3.645.0 | 5 / 7 | |
| 3.637.0 | 5 / 7 | |
| 3.635.0 | 5 / 7 | |
| 3.632.0 | 5 / 7 | |
| 3.631.0 | 4 / 7 | |
| 3.629.0 | 4 / 7 | |
| 3.624.0 | 4 / 7 | |
| 3.623.0 | 4 / 7 |
v3.796.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.789.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.788.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.787.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.786.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.782.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.778.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.777.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.775.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.774.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.772.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.767.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.758.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.751.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.750.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.749.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.744.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.743.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.741.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.738.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.734.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.733.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.731.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.731.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.730.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.726.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.726.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.724.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.723.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.721.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.716.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.714.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.713.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.712.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.709.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.705.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.704.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.699.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.698.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.696.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.693.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.692.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.691.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.689.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.687.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.686.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.685.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.682.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.679.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.678.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.677.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.675.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.674.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.670.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.669.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.668.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.667.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.666.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.665.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.664.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.662.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.658.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.658.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.656.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.654.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.651.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.650.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.649.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.648.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.645.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.637.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.635.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.632.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.631.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.629.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.624.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v3.623.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.