npm package report

Is @aws-amplify/cli safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/aws-amplify__cli
npm packagelast checked 2026-09-19

@aws-amplify/cli · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 4 graph-tracked dependencies · 1 flagged · provenance: unknown

Re-check live →

SIGNALS
Advisory HistoryclearOK

1 historical advisory record(s) on this package (max severity CRITICAL). Add a version to check whether it is affected.

Anomaly HistoryclearOK

1 historical anomaly alert(s) (transitive_malicious_dep) on this package. Add a version to check whether it is affected.

DEPENDENCIES
axios@^1.11.0block
rimraf@^6.0.1clean
tar-stream@^2.2.0clean
@types/tar@^6.1.1clean
PACKAGE @aws-amplify/cliECOSYSTEM npmDECISION ALLOW

Package facts

Weekly downloads
1.3M
GitHub stars
0
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
4
Flagged dependencies
1

History on this package: popular package (1655 versions over 112d) with pattern-only evidence — de-escalated for review rather than blocked

Baked snapshot · run a live check for the current verdict · browse all packages

Other package reports

aws-cdk__asset-awscli-v1aws-cdk__cloud-assembly-apiaws-crypto__ie11-detectionaws-amplify__api-restawesome-typescript-loaderawait-to-js

See all package reports or check any package live.