← Home

@middy/http-urlencode-body-parser

npm Repository Homepage

Urlencode body parser middleware for the middy framework

35
Versions
MIT
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures No source commit

Maintainers

lmamminomiddyjswillfarrell

Keywords

LambdaMiddlewareServerlessFrameworkAWSAWS LambdaMiddyHTTPAPIUrlencodeBody Parser

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance missing-githead AI (provenance): SLSA provenance attestation present; gitHead absence reflects CI config change, not a supply chain risk for this package. ai
publish-pattern dormant-publish AI (publish-pattern): Middy monorepo with 277 versions; publish cadence varies by sub-package; SLSA attestation confirms legitimate CI publish. ai
semgrep semgrep:base64-decode AI (semgrep): Decoding AWS API Gateway isBase64Encoded bodies is core functionality of this middleware; not malicious. ai

Versions (showing 35 of 35)

Version Deps Published
7.7.2 1 / 4
7.7.0 1 / 4
7.6.8 1 / 4
7.6.7 1 / 4
7.6.6 1 / 4
7.6.5 1 / 4
7.6.4 1 / 4
7.6.3 1 / 4
7.6.2 1 / 4
7.6.1 1 / 4
7.6.0 1 / 4
7.5.0 1 / 4
7.4.0 1 / 4
7.3.4 1 / 4
7.3.3 1 / 4
7.3.2 1 / 4
7.3.1 1 / 4
7.3.0 1 / 4
7.2.3 1 / 4
7.2.2 1 / 4
7.2.1 1 / 4
7.2.0 1 / 4
7.1.8 1 / 4
7.1.7 1 / 4
7.1.6 1 / 4
7.1.5 1 / 4
7.1.4 1 / 4
7.1.3 1 / 4
7.1.2 1 / 3
7.1.1 1 / 3
7.1.0 0 / 2
7.0.3 0 / 2
7.0.2 0 / 2
7.0.1 0 / 2
7.0.0 0 / 2

v7.7.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.