@backstage/plugin-auth-backend-module-aws-alb-provider

The aws-alb provider module for the Backstage auth backend.

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

patrikofrebenmarcuseide

Keywords

backstage

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
phantom-deps	phantom-dep:@backstage/plugin-auth-backend	AI (phantom-deps): Backstage plugin modules commonly declare the parent plugin as a dependency for type compatibility without directly importing it. This is a stable pattern in the Backstage monorepo.	ai	2026/04/25
dependencies	unvetted-dep:@backstage/errors	AI (dependencies): Official Backstage monorepo package; well-established, high-download ecosystem dependency. Unvetted status is a registry coverage gap, not a risk signal.	ai	2026/04/25
dependencies	unvetted-dep:@backstage/plugin-auth-node	AI (dependencies): Official Backstage monorepo package; well-established ecosystem dependency. Unvetted status is a registry coverage gap.	ai	2026/04/25
dependencies	unvetted-dep:@backstage/backend-plugin-api	AI (dependencies): Official Backstage monorepo package; well-established ecosystem dependency. Unvetted status is a registry coverage gap.	ai	2026/04/25
dependencies	unvetted-dep:@backstage/plugin-auth-backend	AI (dependencies): Official Backstage monorepo package; well-established ecosystem dependency. Unvetted status is a registry coverage gap.	ai	2026/04/25
dependencies	unvetted-dep:node-cache	AI (dependencies): node-cache is a popular, stable npm caching library with millions of downloads. No known security concerns.	ai	2026/04/25