npm package report
Is @aws-sdk/credential-provider-http safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@aws-sdk/credential-provider-http · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
@aws-sdk/core@^3.973.26clean
@aws-sdk/types@^3.973.6clean
concurrently@7.0.0clean
downlevel-dts@0.10.1clean
premove@4.0.0clean
@smithy/fetch-http-handler@^5.3.15clean
@smithy/node-http-handler@^4.5.1clean
@smithy/protocol-http@^5.3.12clean
@smithy/smithy-client@^4.12.8clean
@smithy/types@^4.13.1clean
@smithy/util-stream@^4.5.21clean
@tsconfig/recommended@1.0.1clean
tslib@^2.6.2clean
typescript@~5.8.3clean
@types/node@^20.14.8clean
PACKAGE @aws-sdk/credential-provider-httpECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
208.8M
GitHub stars
0
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
15
History on this package: popular package (214 versions over 122d) with pattern-only evidence — de-escalated for review rather than blocked
Baked snapshot · run a live check for the current verdict · browse all packages