← Home

@aws/nx-plugin

<div align="center"> <h1>Nx Plugin for AWS</h1> <h3>Build full-stack AWS apps in minutes</h3> <a href="https://opensource.org/licenses/Apache-2.0"> <img src="https://img.shields.io/badge/License-Apache%202.0-yellowgreen.svg" alt="Apa

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

apj-cope

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@types/mdast AI (phantom-deps): TypeScript type package; not directly imported by convention, stable false positive for this package. ai
phantom-deps phantom-dep:unist-util-visit AI (phantom-deps): Referenced in config/generated files; stable false positive for this package. ai
phantom-deps phantom-dep:@types/js-yaml AI (phantom-deps): TypeScript type package; not directly imported by convention, stable false positive for this package. ai
phantom-deps phantom-dep:@types/estree AI (phantom-deps): TypeScript type package; not directly imported by convention, stable false positive for this package. ai
phantom-deps phantom-dep:zod AI (phantom-deps): zod is a direct dependency in package.json; phantom-dep is a false positive here. ai
semgrep semgrep:child-process-import AI (semgrep): Nx plugin generators legitimately spawn child processes to run CLI tools; stable pattern for this package. ai
phantom-deps phantom-dep:@phenomnomnominal/tsquery AI (phantom-deps): Used in config/codegen context; stable false positive for this package. ai
phantom-deps phantom-dep:@nx/vite AI (phantom-deps): Referenced in generator config files; stable false positive for this Nx plugin package. ai
phantom-deps phantom-dep:vite AI (phantom-deps): vite is a declared dependency used in config/build tooling, not directly imported in JS source. ai
semgrep semgrep:dynamic-require AI (semgrep): Dynamic require resolves @nxlv/python provider modules by path; expected plugin loader pattern. ai

Versions (showing 100 of 122)

Version Deps Published
0.123.1 38 / 0
0.123.0 38 / 0
0.122.0 38 / 0
0.121.0 38 / 0
0.120.0 38 / 0
0.119.0 38 / 0
0.118.0 38 / 0
0.117.0 38 / 0
0.116.0 38 / 0
0.115.1 38 / 0
0.115.0 38 / 0
0.114.3 38 / 0
0.114.2 38 / 0
0.114.1 38 / 0
0.106.0 27 / 0
0.87.0 26 / 0
0.86.0 26 / 0
0.85.0 26 / 0
0.84.2 26 / 0
0.84.1 26 / 0
0.84.0 26 / 0
0.83.1 26 / 0
0.83.0 26 / 0
0.82.2 26 / 0
0.82.1 26 / 0
0.82.0 26 / 0
0.81.0 26 / 0
0.80.1 26 / 0
0.80.0 26 / 0
0.79.1 26 / 0
0.79.0 26 / 0
0.78.0 26 / 0
0.77.0 26 / 0
0.76.0 26 / 0
0.75.0 26 / 0
0.74.0 26 / 0
0.73.1 26 / 0
0.73.0 26 / 0
0.72.0 26 / 0
0.71.0 26 / 0
0.70.0 26 / 0
0.69.1 26 / 0
0.69.0 26 / 0
0.68.1 26 / 0
0.68.0 26 / 0
0.67.1 26 / 0
0.67.0 26 / 0
0.66.0 26 / 0
0.65.0 26 / 0
0.64.1 26 / 0
0.64.0 26 / 0
0.63.0 26 / 0
0.62.4 26 / 0
0.62.3 26 / 0
0.62.2 26 / 0
0.62.1 26 / 0
0.58.1 27 / 0
0.55.1 27 / 0
0.53.0 27 / 0
0.44.0 27 / 0
0.38.3 25 / 0
0.38.2 25 / 0
0.38.1 25 / 0
0.38.0 25 / 0
0.37.1 25 / 0
0.37.0 25 / 0
0.36.0 24 / 0
0.35.0 24 / 0
0.34.0 24 / 0
0.33.1 24 / 0
0.33.0 24 / 0
0.32.3 24 / 0
0.32.2 25 / 0
0.32.1 25 / 0
0.32.0 25 / 0
0.31.1 25 / 0
0.31.0 25 / 0
0.30.0 25 / 0
0.29.0 25 / 0
0.28.4 25 / 0
0.28.3 25 / 0
0.28.2 25 / 0
0.28.1 25 / 0
0.28.0 25 / 0
0.27.0 25 / 0
0.26.0 25 / 0
0.25.3 25 / 0
0.25.2 25 / 0
0.25.1 25 / 0
0.25.0 25 / 0
0.24.0 25 / 0
0.23.1 23 / 0
0.23.0 23 / 0
0.22.1 23 / 0
0.22.0 23 / 0
0.21.0 23 / 0
0.20.0 23 / 0
0.19.0 23 / 0
0.18.3 23 / 0
0.18.2 23 / 0
Showing 100 of 122 Next page →

v0.123.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.18.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.18.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.