@middy/core
🛵 The stylish Node.js middleware engine for AWS Lambda (core package)
100
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
lmamminomiddyjswillfarrell
Keywords
Middymiddlewaremiddleware engineLambdaAWSAWS LambdaServerlessFrameworkNode.jsTypeScriptESMAPI GatewayFunction URLstreamify-responseDurable functionevent-drivenobservability
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Package has SLSA provenance attestation via Sigstore, which supersedes gitHead as a supply chain integrity signal. Published by GitHub Actions from the official middyjs/middy monorepo. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @middy/util is a first-party dependency from the same monorepo at the same version (7.1.5), representing a routine internal refactor, not a third-party injection. | ai | |
| provenance | publisher-changed | AI (provenance): willfarrell is the documented primary maintainer of middy (referenced in funding URL); transition from lmammino is a legitimate handoff. SLSA provenance attestation confirms CI/CD-produced release. | ai | |
| dependencies | unvetted-dep:@middy/util | AI (dependencies): Internal monorepo dependency published with same SLSA provenance; stable for this package. | ai | |
| phantom-deps | phantom-dep:@datastream/core | AI (phantom-deps): @datastream/core is a declared dependency in package.json; the phantom-dep finding reflects indirect/config-level usage rather than a true phantom dependency for this package. | ai | |
| typosquat | typosquat.levenshtein:cors | AI (typosquat): Scoped package @middy/core is clearly distinct from cors; Levenshtein match is a false positive for scoped namespaces. | ai |
Versions (showing 100 of 171)
| Version | Deps | Published |
|---|---|---|
| 7.7.2 | 1 / 5 | |
| 7.7.0 | 1 / 5 | |
| 7.6.8 | 1 / 5 | |
| 7.6.7 | 1 / 5 | |
| 7.6.6 | 1 / 5 | |
| 7.6.5 | 1 / 5 | |
| 7.6.4 | 1 / 5 | |
| 7.6.3 | 1 / 5 | |
| 7.6.2 | 1 / 5 | |
| 7.6.1 | 1 / 5 | |
| 7.6.0 | 1 / 5 | |
| 7.5.0 | 1 / 5 | |
| 7.4.0 | 1 / 5 | |
| 7.3.4 | 1 / 5 | |
| 7.3.3 | 1 / 5 | |
| 7.3.2 | 1 / 5 | |
| 7.3.1 | 1 / 5 | |
| 7.3.0 | 1 / 5 | |
| 7.2.3 | 1 / 5 | |
| 7.2.2 | 1 / 5 | |
| 7.2.1 | 1 / 5 | |
| 7.2.0 | 1 / 5 | |
| 7.1.8 | 1 / 5 | |
| 7.1.7 | 1 / 5 | |
| 7.1.6 | 1 / 5 | |
| 7.1.5 | 1 / 5 | |
| 7.1.4 | 1 / 5 | |
| 7.1.3 | 1 / 5 | |
| 7.1.2 | 0 / 5 | |
| 7.1.1 | 0 / 5 | |
| 7.1.0 | 0 / 5 | |
| 7.0.3 | 0 / 5 | |
| 7.0.2 | 0 / 5 | |
| 7.0.1 | 0 / 5 | |
| 7.0.0 | 0 / 5 | |
| 6.4.5 | 0 / 3 | |
| 6.4.4 | 0 / 3 | |
| 6.4.3 | 0 / 3 | |
| 6.4.2 | 0 / 3 | |
| 6.4.1 | 0 / 3 | |
| 6.4.0 | 0 / 3 | |
| 6.3.2 | 0 / 3 | |
| 6.3.1 | 0 / 3 | |
| 6.3.0 | 0 / 3 | |
| 6.2.4 | 0 / 3 | |
| 6.2.3 | 0 / 3 | |
| 6.2.2 | 0 / 3 | |
| 6.2.1 | 0 / 3 | |
| 6.2.0 | 0 / 3 | |
| 6.1.6 | 0 / 3 | |
| 6.1.5 | 0 / 3 | |
| 6.1.4 | 0 / 3 | |
| 6.1.3 | 0 / 3 | |
| 6.1.2 | 0 / 3 | |
| 6.0.0 | 0 / 3 | |
| 5.5.1 | 1 / 2 | |
| 5.5.0 | 1 / 2 | |
| 5.4.7 | 1 / 2 | |
| 5.4.6 | 1 / 2 | |
| 5.4.5 | 1 / 2 | |
| 5.4.4 | 1 / 2 | |
| 5.4.3 | 1 / 2 | |
| 5.4.2 | 1 / 2 | |
| 5.4.1 | 1 / 2 | |
| 5.4.0 | 1 / 2 | |
| 5.3.5 | 1 / 2 | |
| 5.3.4 | 1 / 2 | |
| 5.3.3 | 1 / 2 | |
| 5.3.2 | 1 / 2 | |
| 5.3.1 | 1 / 2 | |
| 5.3.0 | 1 / 2 | |
| 5.2.6 | 1 / 2 | |
| 5.2.4 | 1 / 2 | |
| 5.2.3 | 1 / 2 | |
| 5.2.2 | 1 / 2 | |
| 5.2.1 | 1 / 2 | |
| 5.2.0 | 1 / 2 | |
| 5.1.0 | 1 / 2 | |
| 5.0.3 | 1 / 2 | |
| 5.0.2 | 1 / 2 | |
| 5.0.1 | 1 / 2 | |
| 5.0.0 | 1 / 2 | |
| 4.7.0 | 0 / 3 | |
| 4.6.6 | 0 / 3 | |
| 4.6.5 | 0 / 3 | |
| 4.6.4 | 0 / 3 | |
| 4.6.3 | 0 / 3 | |
| 4.6.2 | 0 / 3 | |
| 4.6.1 | 0 / 3 | |
| 4.6.0 | 0 / 3 | |
| 4.5.5 | 0 / 3 | |
| 4.5.4 | 0 / 3 | |
| 4.5.3 | 0 / 3 | |
| 4.5.2 | 0 / 3 | |
| 4.5.1 | 0 / 3 | |
| 4.5.0 | 0 / 3 | |
| 4.4.3 | 0 / 3 | |
| 4.4.2 | 0 / 3 | |
| 4.4.1 | 0 / 3 | |
| 4.4.0 | 0 / 3 |
Showing 100 of 171
Next page →
v7.7.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.