@aws-sdk/middleware-signing
[](https://www.npmjs.com/package/@aws-sdk/middleware-signing) [](https://www.npmjs.com/packag
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-removed | AI (maintainer-change): AWS SDK team regularly rotates maintainers; aws-sdk-bot is the canonical publisher with an excellent track record. Not indicative of takeover. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New @smithy/* deps are the documented AWS SDK v3 migration from @aws-sdk/* to @smithy/* namespace — a known, official refactoring pattern across the entire SDK. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Internal AWS SDK middleware package; short README and no keywords are typical for this category of packages, not spam indicators. | ai |
Versions (showing 51 of 207)
| Version | Deps | Published |
|---|---|---|
| 3.972.13 | 5 / 5 | |
| 3.972.12 | 5 / 5 | |
| 3.972.11 | 5 / 5 | |
| 3.972.10 | 7 / 5 | |
| 3.972.9 | 7 / 5 | |
| 3.972.8 | 7 / 5 | |
| 3.972.6 | 7 / 5 | |
| 3.972.5 | 7 / 5 | |
| 3.972.4 | 7 / 5 | |
| 3.972.3 | 7 / 5 | |
| 3.972.2 | 7 / 5 | |
| 3.972.1 | 7 / 5 | |
| 3.972.0 | 7 / 5 | |
| 3.971.0 | 7 / 5 | |
| 3.969.0 | 7 / 5 | |
| 3.968.0 | 7 / 5 | |
| 3.965.0 | 7 / 5 | |
| 3.957.0 | 7 / 5 | |
| 3.956.0 | 7 / 5 | |
| 3.953.0 | 7 / 5 | |
| 3.936.0 | 7 / 5 | |
| 3.930.0 | 7 / 5 | |
| 3.922.0 | 7 / 5 | |
| 3.921.0 | 7 / 5 | |
| 3.920.0 | 7 / 5 | |
| 3.914.0 | 7 / 5 | |
| 3.910.0 | 7 / 5 | |
| 3.901.0 | 7 / 5 | |
| 3.893.0 | 7 / 5 | |
| 3.892.0 | 7 / 5 | |
| 3.891.0 | 7 / 5 | |
| 3.890.0 | 7 / 5 | |
| 3.887.0 | 7 / 5 | |
| 3.873.0 | 7 / 5 | |
| 3.862.0 | 7 / 5 | |
| 3.840.0 | 7 / 5 | |
| 3.821.0 | 7 / 5 | |
| 3.804.0 | 7 / 5 | |
| 3.796.0 | 7 / 5 | |
| 3.775.0 | 7 / 5 | |
| 3.734.0 | 7 / 5 | |
| 3.731.0 | 7 / 5 | |
| 3.723.0 | 7 / 5 | |
| 3.714.0 | 7 / 5 | |
| 3.713.0 | 7 / 5 | |
| 3.709.0 | 7 / 5 | |
| 3.696.0 | 7 / 5 | |
| 3.693.0 | 7 / 5 | |
| 3.692.0 | 7 / 5 | |
| 3.691.0 | 7 / 5 | |
| 3.686.0 | 7 / 5 |
v3.972.13
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.972.12
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v3.972.11
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.