@aws-sdk/eventstream-serde-node
[](https://www.npmjs.com/package/@aws-sdk/eventstream-serde-node) [](https://www.npmj
94
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
mattsb42-awskuheamzn-ossaws-sdk-bottrivikr-aws
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist-es/EventStreamMarshaller.js | AI (source-diff): Standard TypeScript compiler output (ES module build). Long lines are an artifact of tsc compilation, not obfuscation. Code is fully readable and imports only legitimate AWS SDK packages. | ai | |
| source-diff | obfuscated-file:dist-cjs/EventStreamMarshaller.js | AI (source-diff): Standard TypeScript compiler output (CJS build). Long lines are an artifact of tsc compilation, not obfuscation. Code is fully readable and imports only legitimate AWS SDK packages. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Consistent with normal AWS SDK team rotation; no indication of account compromise or hostile takeover. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @smithy/eventstream-codec is part of the documented AWS SDK v3 → Smithy refactoring; replaces multiple @aws-sdk/* deps with the canonical @smithy equivalent. | ai | |
| source-diff | source-size-dropped | AI (source-diff): Size drop reflects intentional refactoring: logic moved to @smithy/eventstream-codec, leaving a thin re-export wrapper. Legitimate architectural change. | ai | |
| phantom-deps | phantom-dep:@smithy/eventstream-codec | AI (phantom-deps): Package is a thin wrapper post-Smithy refactoring; dependency is used at dist level. Framework-scoped convention flagged by analyzer itself. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): AWS SDK team rotation; aws-sdk-bot publisher with strong track record. Maintainer changes are expected over the 2254-day lifespan of this package. | ai | |
| provenance | no-provenance | AI (provenance): AWS SDK gamma release from 2020-era; predates Sigstore provenance. aws-sdk-bot is a trusted, established publisher. Stable false positive for this package. | ai |
Versions (showing 94 of 94)
| Version | Deps | Published |
|---|---|---|
| 3.374.0 | 2 / 7 | |
| 3.370.0 | 3 / 7 | |
| 3.369.0 | 3 / 7 | |
| 3.357.0 | 3 / 7 | |
| 3.347.0 | 3 / 7 | |
| 3.342.0 | 3 / 7 | |
| 3.341.0 | 3 / 7 | |
| 3.338.0 | 3 / 7 | |
| 3.337.0 | 3 / 7 | |
| 3.329.0 | 3 / 7 | |
| 3.310.0 | 3 / 7 | |
| 3.306.0 | 3 / 7 | |
| 3.303.0 | 3 / 7 | |
| 3.299.0 | 3 / 7 | |
| 3.296.0 | 3 / 8 | |
| 3.295.0 | 3 / 8 | |
| 3.292.0 | 3 / 8 | |
| 3.290.0 | 3 / 8 | |
| 3.289.0 | 3 / 8 | |
| 3.272.0 | 3 / 8 | |
| 3.271.0 | 3 / 8 | |
| 3.267.0 | 3 / 8 | |
| 3.266.1 | 3 / 8 | |
| 3.266.0 | 3 / 8 | |
| 3.258.0 | 3 / 8 | |
| 3.257.0 | 3 / 8 | |
| 3.254.0 | 3 / 8 | |
| 3.226.0 | 3 / 8 | |
| 3.224.0 | 3 / 8 | |
| 3.222.0 | 3 / 8 | |
| 3.215.0 | 3 / 8 | |
| 3.212.0 | 3 / 8 | |
| 3.208.0 | 3 / 8 | |
| 3.201.0 | 3 / 8 | |
| 3.200.0 | 3 / 8 | |
| 3.199.0 | 3 / 8 | |
| 3.198.0 | 3 / 8 | |
| 3.197.0 | 3 / 8 | |
| 3.193.0 | 3 / 8 | |
| 3.190.0 | 3 / 8 | |
| 3.188.0 | 3 / 8 | |
| 3.186.0 | 3 / 8 | |
| 3.183.0 | 3 / 8 | |
| 3.178.0 | 3 / 8 | |
| 3.171.0 | 3 / 8 | |
| 3.170.0 | 3 / 8 | |
| 3.168.0 | 3 / 8 | |
| 3.162.0 | 3 / 8 | |
| 3.160.0 | 3 / 8 | |
| 3.159.0 | 3 / 8 | |
| 3.127.0 | 3 / 8 | |
| 3.120.0 | 3 / 8 | |
| 3.118.1 | 3 / 8 | |
| 3.110.0 | 4 / 8 | |
| 3.109.0 | 4 / 8 | |
| 3.78.0 | 4 / 8 | |
| 3.72.0 | 4 / 8 | |
| 3.58.0 | 4 / 7 | |
| 3.55.0 | 4 / 7 | |
| 3.54.1 | 4 / 7 | |
| 3.54.0 | 4 / 7 | |
| 3.53.0 | 4 / 7 | |
| 3.52.0 | 4 / 7 | |
| 3.50.0 | 4 / 7 | |
| 3.49.0 | 4 / 7 | |
| 3.47.2 | 4 / 1 | |
| 3.47.1 | 4 / 1 | |
| 3.47.0 | 4 / 1 | |
| 3.46.0 | 4 / 1 | |
| 3.40.0 | 4 / 4 | |
| 3.39.0 | 4 / 4 | |
| 3.38.0 | 4 / 4 | |
| 3.37.0 | 4 / 4 | |
| 3.36.0 | 4 / 4 | |
| 3.35.0 | 4 / 4 | |
| 3.34.0 | 4 / 4 | |
| 3.32.0 | 4 / 4 | |
| 3.29.0 | 4 / 4 | |
| 3.25.0 | 4 / 4 | |
| 3.23.0 | 4 / 4 | |
| 3.22.0 | 4 / 4 | |
| 3.20.0 | 4 / 4 | |
| 3.18.0 | 4 / 4 | |
| 3.15.0 | 4 / 4 | |
| 3.13.1 | 4 / 4 | |
| 3.12.0 | 4 / 4 | |
| 3.10.0 | 4 / 4 | |
| 3.6.1 | 4 / 4 | |
| 3.4.1 | 4 / 4 | |
| 3.4.0 | 4 / 4 | |
| 3.3.0 | 4 / 4 | |
| 3.2.0 | 3 / 5 | |
| 3.1.0 | 3 / 5 | |
| 3.0.0 | 3 / 5 |