npm package report

Is @aws-cdk/asset-awscli-v1 safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/aws-cdk__asset-awscli-v1
npm packagelast checked 2026-09-19

@aws-cdk/asset-awscli-v1 · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 13 graph-tracked dependencies · provenance: unknown

Re-check live →

SIGNALS
All signals clearclearOK

No known-malicious match, advisory, commit-level finding or anomaly.

DEPENDENCIES
eslint@^9clean
eslint-import-resolver-typescript@^3.10.1clean
eslint-plugin-import@^2.32.0clean
jest@^29clean
jest-junit@^16clean
@stylistic/eslint-plugin@^2clean
ts-jest@^29clean
ts-node@^10.9.2clean
typescript@^5clean
@typescript-eslint/eslint-plugin@^8clean
@typescript-eslint/parser@^8clean
@types/jest@^29clean
@types/node@^16clean
PACKAGE @aws-cdk/asset-awscli-v1ECOSYSTEM npmDECISION ALLOW

Package facts

Weekly downloads
11.9M
GitHub stars
0
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
13

History on this package: popular package (333 versions over 117d) with pattern-only evidence — de-escalated for review rather than blocked

Baked snapshot · run a live check for the current verdict · browse all packages

Other package reports

aws-cdk__cloud-assembly-apiaws-crypto__ie11-detectionaws-crypto__sha256-browseraws-amplify__cliaws-amplify__api-restawesome-typescript-loader

See all package reports or check any package live.