@aws-sdk/node-config-provider
Load config default values from ini config files and environmental variable
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
mattsb42-awskuheamzn-ossaws-sdk-bottrivikr-aws
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist-es/fromSharedConfigFiles.js | AI (source-diff): Long line is a base64-encoded inline source map from TypeScript compilation, not obfuscation. Standard AWS SDK build artifact; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist-cjs/fromSharedConfigFiles.js | AI (source-diff): Long line is a base64-encoded inline source map from TypeScript compilation, not obfuscation. Standard AWS SDK build artifact; stable false positive for this package. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Maintainer rotation is normal for a long-lived AWS SDK package managed by a team. No takeover indicators present. | ai | |
| source-diff | source-size-dropped | AI (source-diff): Package became a thin re-export wrapper after migrating implementation to @smithy/node-config-provider; size drop is expected and consistent with the AWS SDK v3 Smithy migration pattern. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @smithy/node-config-provider is the official Smithy runtime replacement for AWS SDK v3 node config functionality; this migration is well-documented and expected. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): AWS SDK team regularly rotates maintainers; mattsb42-aws and kuhe are known AWS contributors. This is stable for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): AWS SDK sub-packages routinely lack keywords and detailed READMEs; this is a structural pattern of the monorepo, not a spam indicator. | ai |
Versions (showing 51 of 105)
| Version | Deps | Published |
|---|---|---|
| 3.374.0 | 2 / 7 | |
| 3.370.0 | 4 / 7 | |
| 3.369.0 | 4 / 7 | |
| 3.366.0 | 4 / 7 | |
| 3.357.0 | 4 / 7 | |
| 3.354.0 | 4 / 7 | |
| 3.353.0 | 4 / 7 | |
| 3.347.0 | 4 / 7 | |
| 3.342.0 | 4 / 7 | |
| 3.341.0 | 4 / 7 | |
| 3.338.0 | 4 / 7 | |
| 3.337.0 | 4 / 7 | |
| 3.329.0 | 4 / 7 | |
| 3.310.0 | 4 / 7 | |
| 3.306.0 | 4 / 7 | |
| 3.303.0 | 4 / 7 | |
| 3.300.0 | 4 / 7 | |
| 3.296.0 | 4 / 7 | |
| 3.295.0 | 4 / 7 | |
| 3.292.0 | 4 / 7 | |
| 3.290.0 | 4 / 7 | |
| 3.289.0 | 4 / 7 | |
| 3.287.0 | 4 / 7 | |
| 3.272.0 | 4 / 7 | |
| 3.271.0 | 4 / 7 | |
| 3.267.0 | 4 / 7 | |
| 3.266.1 | 4 / 7 | |
| 3.266.0 | 4 / 7 | |
| 3.259.0 | 4 / 7 | |
| 3.257.0 | 4 / 7 | |
| 3.254.0 | 4 / 7 | |
| 3.226.0 | 4 / 7 | |
| 3.224.0 | 4 / 7 | |
| 3.222.0 | 4 / 7 | |
| 3.215.0 | 4 / 7 | |
| 3.212.0 | 4 / 7 | |
| 3.209.0 | 4 / 7 | |
| 3.208.0 | 4 / 7 | |
| 3.201.0 | 4 / 7 | |
| 3.200.0 | 4 / 7 | |
| 3.198.0 | 4 / 7 | |
| 3.197.0 | 4 / 7 | |
| 3.193.0 | 4 / 7 | |
| 3.190.0 | 4 / 7 | |
| 3.188.0 | 4 / 7 | |
| 3.186.0 | 4 / 7 | |
| 3.183.0 | 4 / 7 | |
| 3.178.0 | 4 / 7 | |
| 3.171.0 | 4 / 7 | |
| 3.170.0 | 4 / 7 | |
| 3.168.0 | 4 / 7 |