← Home

@aws-cdk/cloudformation-diff

npm Repository Homepage

Utilities to diff CDK stacks against CloudFormation templates

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

amzn-ossaws-cdk-team

Keywords

awscdk

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:aws-sdk AI (dependencies): aws-sdk is the official AWS JavaScript SDK v2, a first-party Amazon package. Its use is expected and appropriate in an AWS CDK CloudFormation diff utility. ai
dependencies unvetted-dep:@aws-cdk/cfnspec AI (dependencies): @aws-cdk/cfnspec is a sibling package from the same aws-cdk-team publisher and monorepo; it is a legitimate internal CDK dependency. ai
phantom-deps phantom-dep:@types/node AI (phantom-deps): @types/node is a TypeScript type package commonly declared in CDK package dependencies for type resolution; not a real runtime phantom dependency concern for this package. ai
source-diff obfuscated-file:lib/format-foreach.js AI (source-diff): Compiled TypeScript output from official AWS CDK package; long lines are from TS compilation, not obfuscation. Code is readable and matches package purpose. SLSA provenance confirms CI/CD origin. ai
provenance publisher-changed AI (provenance): AWS CDK migrated to GitHub Actions CI/CD publishing with SLSA attestation; this is a legitimate infrastructure change for the official aws/aws-cdk-cli repo. ai
source-diff obfuscated-file:lib/mappings.js AI (source-diff): The file contains readable compiled TypeScript with meaningful names and logic; long lines are likely data tables, not obfuscation. Consistent with the package's diff-rendering purpose. ai
provenance no-provenance AI (provenance): aws-cdk-team is a well-established publisher with 500+ approved packages; lack of Sigstore provenance is a known gap for this publisher, not a security risk. ai
source-diff obfuscated-file:lib/diff/template-and-changeset-diff-merger.js AI (source-diff): File contains readable TypeScript-compiled JS with standard CDK class definitions. Long lines are an artifact of the TypeScript compiler output, not obfuscation. Pattern is consistent across all CDK packages. ai
source-diff obfuscated-file:lib/iam/iam-identity-center.js AI (source-diff): File contains readable TypeScript-compiled JS with standard CDK class definitions. Long lines are an artifact of the TypeScript compiler output, not obfuscation. Pattern is consistent across all CDK packages. ai
dependencies unvetted-dep:@aws-cdk/service-spec-types AI (dependencies): First-party AWS CDK package from the same aws/aws-cdk-cli organization; expected internal dependency for this package. ai
dependencies unvetted-dep:@aws-cdk/aws-service-spec AI (dependencies): First-party AWS CDK package from the same aws/aws-cdk-cli organization; expected internal dependency for this package. ai

Versions (showing 100 of 554)

Version Deps Published
2.49.1 7 / 7
2.49.0 7 / 7
2.48.0 7 / 7
2.47.0 7 / 7
2.46.0 7 / 7
2.45.0 7 / 7
2.44.0 7 / 7
2.43.1 7 / 7
2.43.0 7 / 7
2.42.1 7 / 7
2.42.0 7 / 7
2.41.0 7 / 7
2.40.0 7 / 7
2.39.1 7 / 7
2.39.0 7 / 7
2.38.1 7 / 7
2.38.0 7 / 7
2.37.1 7 / 7
2.37.0 7 / 7
2.36.0 7 / 7
2.35.0 7 / 7
2.34.2 7 / 7
2.34.1 7 / 7
2.34.0 7 / 7
2.33.0 7 / 7
2.32.1 7 / 7
2.32.0 7 / 7
2.31.2 7 / 7
2.31.1 7 / 7
2.31.0 7 / 7
2.30.0 7 / 7
2.29.1 7 / 7
2.29.0 7 / 7
2.28.1 7 / 7
2.28.0 7 / 7
2.27.0 7 / 7
2.26.0 7 / 7
2.25.0 7 / 7
2.24.1 7 / 7
2.24.0 7 / 7
2.23.0 7 / 7
2.22.0 7 / 7
2.21.1 7 / 7
2.21.0 7 / 7
2.20.0 7 / 7
2.19.0 7 / 7
2.18.0 7 / 7
2.17.0 7 / 7
2.16.0 7 / 7
2.15.0 7 / 7
2.14.0 7 / 7
2.13.0 7 / 7
2.12.0 7 / 7
2.11.0 7 / 7
2.10.0 7 / 7
2.9.0 7 / 7
2.8.0 7 / 7
2.7.0 7 / 7
2.6.0 7 / 7
2.5.0 7 / 7
2.4.0 7 / 7
2.3.0 7 / 7
2.2.0 7 / 7
2.1.0 7 / 7
2.0.0 7 / 7
1.204.0 7 / 7
1.203.0 7 / 7
1.202.0 7 / 7
1.201.0 7 / 7
1.200.0 7 / 7
1.199.0 7 / 7
1.198.1 7 / 7
1.198.0 7 / 7
1.197.0 7 / 7
1.196.0 7 / 7
1.195.0 7 / 7
1.194.0 7 / 7
1.193.0 7 / 7
1.192.0 7 / 7
1.191.0 7 / 7
1.190.0 7 / 7
1.189.0 7 / 7
1.188.0 7 / 7
1.187.0 7 / 7
1.186.1 7 / 7
1.186.0 7 / 7
1.185.0 7 / 7
1.184.1 7 / 7
1.184.0 7 / 7
1.183.0 7 / 7
1.182.0 7 / 7
1.181.1 7 / 7
1.181.0 7 / 7
1.180.0 7 / 7
1.179.0 7 / 7
1.178.0 7 / 7
1.177.0 7 / 7
1.176.0 7 / 7
1.175.0 7 / 7
1.174.0 7 / 7
Showing 100 of 554 Next page →