← Home

@aws-cdk/cloudformation-diff

npm Repository Homepage

Utilities to diff CDK stacks against CloudFormation templates

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

amzn-ossaws-cdk-team

Keywords

awscdk

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:aws-sdk AI (dependencies): aws-sdk is the official AWS JavaScript SDK v2, a first-party Amazon package. Its use is expected and appropriate in an AWS CDK CloudFormation diff utility. ai
dependencies unvetted-dep:@aws-cdk/cfnspec AI (dependencies): @aws-cdk/cfnspec is a sibling package from the same aws-cdk-team publisher and monorepo; it is a legitimate internal CDK dependency. ai
phantom-deps phantom-dep:@types/node AI (phantom-deps): @types/node is a TypeScript type package commonly declared in CDK package dependencies for type resolution; not a real runtime phantom dependency concern for this package. ai
source-diff obfuscated-file:lib/format-foreach.js AI (source-diff): Compiled TypeScript output from official AWS CDK package; long lines are from TS compilation, not obfuscation. Code is readable and matches package purpose. SLSA provenance confirms CI/CD origin. ai
provenance publisher-changed AI (provenance): AWS CDK migrated to GitHub Actions CI/CD publishing with SLSA attestation; this is a legitimate infrastructure change for the official aws/aws-cdk-cli repo. ai
source-diff obfuscated-file:lib/mappings.js AI (source-diff): The file contains readable compiled TypeScript with meaningful names and logic; long lines are likely data tables, not obfuscation. Consistent with the package's diff-rendering purpose. ai
provenance no-provenance AI (provenance): aws-cdk-team is a well-established publisher with 500+ approved packages; lack of Sigstore provenance is a known gap for this publisher, not a security risk. ai
source-diff obfuscated-file:lib/diff/template-and-changeset-diff-merger.js AI (source-diff): File contains readable TypeScript-compiled JS with standard CDK class definitions. Long lines are an artifact of the TypeScript compiler output, not obfuscation. Pattern is consistent across all CDK packages. ai
source-diff obfuscated-file:lib/iam/iam-identity-center.js AI (source-diff): File contains readable TypeScript-compiled JS with standard CDK class definitions. Long lines are an artifact of the TypeScript compiler output, not obfuscation. Pattern is consistent across all CDK packages. ai
dependencies unvetted-dep:@aws-cdk/service-spec-types AI (dependencies): First-party AWS CDK package from the same aws/aws-cdk-cli organization; expected internal dependency for this package. ai
dependencies unvetted-dep:@aws-cdk/aws-service-spec AI (dependencies): First-party AWS CDK package from the same aws/aws-cdk-cli organization; expected internal dependency for this package. ai

Versions (showing 100 of 554)

Version Deps Published
2.187.1 7 / 24
2.187.0 7 / 22
2.186.0 7 / 23
2.185.1 7 / 23
2.185.0 7 / 23
2.184.1 7 / 23
2.184.0 7 / 23
2.183.1 7 / 23
2.183.0 7 / 23
2.182.0 7 / 23
2.181.2 7 / 23
2.181.1 7 / 24
2.181.0 7 / 24
2.180.0 7 / 24
2.179.0 7 / 8
2.178.2 7 / 8
2.178.1 7 / 8
2.178.0 7 / 8
2.177.0 7 / 8
2.176.0 7 / 8
2.175.1 7 / 8
2.175.0 7 / 8
2.174.1 7 / 8
2.174.0 7 / 8
2.173.4 7 / 8
2.173.3 7 / 8
2.173.2 7 / 8
2.173.1 7 / 8
2.173.0 7 / 8
2.172.0 7 / 8
2.171.1 7 / 8
2.171.0 7 / 8
2.170.0 7 / 8
2.169.0 7 / 8
2.168.0 7 / 8
2.167.2 7 / 8
2.167.1 7 / 8
2.167.0 7 / 8
2.166.0 7 / 8
2.165.0 7 / 8
2.164.1 7 / 8
2.164.0 7 / 8
2.163.1 7 / 8
2.163.0 7 / 8
2.162.1 7 / 8
2.162.0 7 / 8
2.161.1 7 / 8
2.161.0 7 / 8
2.160.0 7 / 8
2.159.1 7 / 8
2.159.0 7 / 8
2.158.0 7 / 8
2.157.0 7 / 8
2.156.0 7 / 8
2.155.0 7 / 8
2.154.1 7 / 8
2.154.0 7 / 8
2.153.0 7 / 8
2.152.0 7 / 8
2.151.1 7 / 8
2.151.0 7 / 8
2.150.0 7 / 8
2.149.0 7 / 8
2.148.1 7 / 8
2.148.0 7 / 8
2.147.3 7 / 8
2.147.2 7 / 8
2.147.1 7 / 8
2.147.0 7 / 8
2.146.0 7 / 8
2.145.0 7 / 8
2.144.0 7 / 8
2.143.1 7 / 8
2.143.0 7 / 8
2.142.1 7 / 8
2.142.0 7 / 8
2.141.0 7 / 8
2.140.0 7 / 8
2.139.1 7 / 8
2.139.0 7 / 8
2.138.0 7 / 8
2.137.0 7 / 8
2.136.1 8 / 7
2.136.0 8 / 7
2.135.0 8 / 7
2.134.0 8 / 7
2.133.0 7 / 8
2.132.1 7 / 8
2.132.0 7 / 8
2.131.0 7 / 8
2.130.0 7 / 8
2.129.0 7 / 8
2.128.0 7 / 8
2.127.0 7 / 8
2.126.0 7 / 8
2.125.0 7 / 8
2.124.0 7 / 8
2.123.0 7 / 8
2.122.0 7 / 8
2.121.1 7 / 8
Showing 100 of 554 Next page →