← Home

@aws-cdk/cloudformation-diff

npm Repository Homepage

Utilities to diff CDK stacks against CloudFormation templates

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

amzn-ossaws-cdk-team

Keywords

awscdk

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:aws-sdk AI (dependencies): aws-sdk is the official AWS JavaScript SDK v2, a first-party Amazon package. Its use is expected and appropriate in an AWS CDK CloudFormation diff utility. ai
dependencies unvetted-dep:@aws-cdk/cfnspec AI (dependencies): @aws-cdk/cfnspec is a sibling package from the same aws-cdk-team publisher and monorepo; it is a legitimate internal CDK dependency. ai
phantom-deps phantom-dep:@types/node AI (phantom-deps): @types/node is a TypeScript type package commonly declared in CDK package dependencies for type resolution; not a real runtime phantom dependency concern for this package. ai
source-diff obfuscated-file:lib/format-foreach.js AI (source-diff): Compiled TypeScript output from official AWS CDK package; long lines are from TS compilation, not obfuscation. Code is readable and matches package purpose. SLSA provenance confirms CI/CD origin. ai
provenance publisher-changed AI (provenance): AWS CDK migrated to GitHub Actions CI/CD publishing with SLSA attestation; this is a legitimate infrastructure change for the official aws/aws-cdk-cli repo. ai
source-diff obfuscated-file:lib/mappings.js AI (source-diff): The file contains readable compiled TypeScript with meaningful names and logic; long lines are likely data tables, not obfuscation. Consistent with the package's diff-rendering purpose. ai
provenance no-provenance AI (provenance): aws-cdk-team is a well-established publisher with 500+ approved packages; lack of Sigstore provenance is a known gap for this publisher, not a security risk. ai
source-diff obfuscated-file:lib/diff/template-and-changeset-diff-merger.js AI (source-diff): File contains readable TypeScript-compiled JS with standard CDK class definitions. Long lines are an artifact of the TypeScript compiler output, not obfuscation. Pattern is consistent across all CDK packages. ai
source-diff obfuscated-file:lib/iam/iam-identity-center.js AI (source-diff): File contains readable TypeScript-compiled JS with standard CDK class definitions. Long lines are an artifact of the TypeScript compiler output, not obfuscation. Pattern is consistent across all CDK packages. ai
dependencies unvetted-dep:@aws-cdk/service-spec-types AI (dependencies): First-party AWS CDK package from the same aws/aws-cdk-cli organization; expected internal dependency for this package. ai
dependencies unvetted-dep:@aws-cdk/aws-service-spec AI (dependencies): First-party AWS CDK package from the same aws/aws-cdk-cli organization; expected internal dependency for this package. ai

Versions (showing 100 of 554)

Version Deps Published
2.121.0 7 / 8
2.120.0 7 / 8
2.119.0 7 / 8
2.118.0 7 / 7
2.117.0 7 / 7
2.116.1 7 / 7
2.116.0 7 / 7
2.115.0 7 / 7
2.114.1 7 / 7
2.114.0 7 / 7
2.113.0 7 / 7
2.112.0 7 / 7
2.111.0 7 / 7
2.110.1 7 / 7
2.110.0 7 / 7
2.109.0 7 / 7
2.108.1 7 / 7
2.108.0 7 / 7
2.107.0 7 / 7
2.106.1 7 / 7
2.106.0 7 / 7
2.105.0 6 / 7
2.104.0 6 / 7
2.103.1 6 / 7
2.103.0 6 / 7
2.102.1 6 / 7
2.102.0 6 / 7
2.101.1 6 / 7
2.101.0 6 / 7
2.100.0 6 / 7
2.99.1 6 / 7
2.99.0 6 / 7
2.98.0 6 / 7
2.97.1 6 / 7
2.97.0 6 / 7
2.96.2 6 / 7
2.96.1 6 / 7
2.96.0 6 / 7
2.95.1 6 / 7
2.95.0 6 / 7
2.94.0 6 / 7
2.93.0 6 / 7
2.92.0 6 / 7
2.91.0 6 / 7
2.90.0 6 / 7
2.89.0 6 / 7
2.88.0 6 / 7
2.87.0 6 / 7
2.86.0 6 / 7
2.85.0 6 / 7
2.84.0 6 / 7
2.83.1 6 / 7
2.83.0 6 / 7
2.82.0 6 / 7
2.81.0 6 / 7
2.80.0 6 / 7
2.79.1 6 / 7
2.79.0 6 / 7
2.78.0 6 / 7
2.77.0 6 / 7
2.76.0 6 / 7
2.75.1 6 / 7
2.75.0 6 / 7
2.74.0 6 / 7
2.73.0 6 / 7
2.72.1 6 / 7
2.72.0 6 / 7
2.71.0 6 / 7
2.70.0 6 / 7
2.69.0 6 / 7
2.68.0 6 / 7
2.67.0 6 / 7
2.66.1 6 / 7
2.66.0 6 / 7
2.65.0 6 / 7
2.64.0 7 / 7
2.63.2 7 / 7
2.63.1 7 / 7
2.63.0 7 / 7
2.62.2 7 / 7
2.62.1 7 / 7
2.62.0 7 / 7
2.61.1 7 / 7
2.61.0 7 / 7
2.60.0 7 / 7
2.59.0 7 / 7
2.58.1 7 / 7
2.58.0 7 / 7
2.57.0 7 / 7
2.56.1 7 / 7
2.56.0 7 / 7
2.55.1 7 / 7
2.55.0 7 / 7
2.54.0 7 / 7
2.53.0 7 / 7
2.52.1 7 / 7
2.52.0 7 / 7
2.51.1 7 / 7
2.51.0 7 / 7
2.50.0 7 / 7
Showing 100 of 554 Next page →