Skip to content

fix(lambda): bump the aws-powertools group in /lambdas with 4 updates #4972

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(lambda): bump the aws-powertools group in /lambdas with 4 updates #4972

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Bumps the aws-powertools group in /lambdas with 4 updates: @aws-lambda-powertools/parameters, @aws-lambda-powertools/logger, @aws-lambda-powertools/metrics and @aws-lambda-powertools/tracer.

Updates @aws-lambda-powertools/parameters from 2.29.0 to 2.30.0

Release notes

Sourced from @​aws-lambda-powertools/parameters's releases.

v2.30.0

Summary

We're excited to announce AWS Lambda durable function support in Powertools for AWS Lambda TypeScript. This allows you to leverage AWS Lambda's new durable execution capabilities while taking the advantage of features such as maintaining idempotency guarantees, making it easier to build reliable serverless workflows that span multiple invocations.

AWS Lambda durable functions allow you to simplify building multi-step applications and AI workflows. These functions automatically checkpoint progress, suspend execution for up to one year during long-running tasks, and recover from failures without the need to manage additional infrastructure.

[!NOTE] Lambda function handlers using MiddyJS or Class method decorators aren’t compatible with Durable Function handlers at this time. Tracking issues: MiddyJS middyjs/middy#1531 Class Decorator aws-powertools/powertools-lambda-typescript#4832

This release also includes some bug fixes and a documentation improvement with the help of the community.

⭐ Congratulations to @​jinxiao and @​dwandro for their first PR merged in the project 🎉

Changes

  • fix(logger): merged temp keys with same keys when appending to the logger (#4840) by @​sdangol
  • fix(idempotency): Update durableExecutionMode string (#4837) by @​ConnorKirk
  • feat(idempotency): Allow durable function to replay (#4834) by @​ConnorKirk
  • fix(event-handler): threshold limit for compression not respected when content-length not set (#4827) by @​svozza
  • feat(parser): fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) by @​benthorner

📜 Documentation updates

🔧 Maintenance

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/parameters's changelog.

2.30.0 (2025-12-11)

Maintenance

  • commons bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • logger bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • metrics bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • batch bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • event-handler export types for event handler middleware (#4807) (c46974c)

Bug Fixes

  • commons revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • logger merged temp keys with same keys when appending to the logger (#4840) (b30c9c4)
  • logger revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • metrics revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • idempotency Update durableExecutionMode string (#4837) (919c26d)
  • batch revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • event-handler threshold limit for compression not respected when content-length not set (#4827) (ad14e18)

Features

  • idempotency Allow durable function to replay (#4834) (4dc0798)
  • parser fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) (bf522f8)
Commits
  • dd5395b chore(ci): bump version to 2.30.0 (#4859)
  • 4e8d00b chore(deps-dev): bump aws-sdk from 2.1692.0 to 2.1693.0 (#4857)
  • 609c891 chore(deps-dev): bump markdownlint-cli2 from 0.19.1 to 0.20.0 (#4853)
  • 155fdf5 chore(deps): bump aws-cdk-lib from 2.228.0 to 2.232.1 in the aws-cdk group ac...
  • fc1831a chore(deps): bump the aws-sdk-v3 group across 1 directory with 42 updates (#4...
  • 915f47a chore(deps): bump @​types/node from 24.10.1 to 24.10.2 (#4856)
  • 22bbf77 chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#4852)
  • 69727c2 chore(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs (#4850)
  • 47c6545 chore(deps): bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847)
  • 68a71d1 chore(deps): bump esbuild from 0.27.0 to 0.27.1 (#4849)
  • Additional commits viewable in compare view

Updates @aws-lambda-powertools/logger from 2.29.0 to 2.30.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.30.0

Summary

We're excited to announce AWS Lambda durable function support in Powertools for AWS Lambda TypeScript. This allows you to leverage AWS Lambda's new durable execution capabilities while taking the advantage of features such as maintaining idempotency guarantees, making it easier to build reliable serverless workflows that span multiple invocations.

AWS Lambda durable functions allow you to simplify building multi-step applications and AI workflows. These functions automatically checkpoint progress, suspend execution for up to one year during long-running tasks, and recover from failures without the need to manage additional infrastructure.

[!NOTE] Lambda function handlers using MiddyJS or Class method decorators aren’t compatible with Durable Function handlers at this time. Tracking issues: MiddyJS middyjs/middy#1531 Class Decorator aws-powertools/powertools-lambda-typescript#4832

This release also includes some bug fixes and a documentation improvement with the help of the community.

⭐ Congratulations to @​jinxiao and @​dwandro for their first PR merged in the project 🎉

Changes

  • fix(logger): merged temp keys with same keys when appending to the logger (#4840) by @​sdangol
  • fix(idempotency): Update durableExecutionMode string (#4837) by @​ConnorKirk
  • feat(idempotency): Allow durable function to replay (#4834) by @​ConnorKirk
  • fix(event-handler): threshold limit for compression not respected when content-length not set (#4827) by @​svozza
  • feat(parser): fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) by @​benthorner

📜 Documentation updates

🔧 Maintenance

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.30.0 (2025-12-11)

Maintenance

  • commons bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • logger bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • metrics bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • batch bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • event-handler export types for event handler middleware (#4807) (c46974c)

Bug Fixes

  • commons revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • logger merged temp keys with same keys when appending to the logger (#4840) (b30c9c4)
  • logger revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • metrics revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • idempotency Update durableExecutionMode string (#4837) (919c26d)
  • batch revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • event-handler threshold limit for compression not respected when content-length not set (#4827) (ad14e18)

Features

  • idempotency Allow durable function to replay (#4834) (4dc0798)
  • parser fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) (bf522f8)
Commits
  • dd5395b chore(ci): bump version to 2.30.0 (#4859)
  • 4e8d00b chore(deps-dev): bump aws-sdk from 2.1692.0 to 2.1693.0 (#4857)
  • 609c891 chore(deps-dev): bump markdownlint-cli2 from 0.19.1 to 0.20.0 (#4853)
  • 155fdf5 chore(deps): bump aws-cdk-lib from 2.228.0 to 2.232.1 in the aws-cdk group ac...
  • fc1831a chore(deps): bump the aws-sdk-v3 group across 1 directory with 42 updates (#4...
  • 915f47a chore(deps): bump @​types/node from 24.10.1 to 24.10.2 (#4856)
  • 22bbf77 chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#4852)
  • 69727c2 chore(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs (#4850)
  • 47c6545 chore(deps): bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847)
  • 68a71d1 chore(deps): bump esbuild from 0.27.0 to 0.27.1 (#4849)
  • Additional commits viewable in compare view

Updates @aws-lambda-powertools/metrics from 2.29.0 to 2.30.0

Release notes

Sourced from @​aws-lambda-powertools/metrics's releases.

v2.30.0

Summary

We're excited to announce AWS Lambda durable function support in Powertools for AWS Lambda TypeScript. This allows you to leverage AWS Lambda's new durable execution capabilities while taking the advantage of features such as maintaining idempotency guarantees, making it easier to build reliable serverless workflows that span multiple invocations.

AWS Lambda durable functions allow you to simplify building multi-step applications and AI workflows. These functions automatically checkpoint progress, suspend execution for up to one year during long-running tasks, and recover from failures without the need to manage additional infrastructure.

[!NOTE] Lambda function handlers using MiddyJS or Class method decorators aren’t compatible with Durable Function handlers at this time. Tracking issues: MiddyJS middyjs/middy#1531 Class Decorator aws-powertools/powertools-lambda-typescript#4832

This release also includes some bug fixes and a documentation improvement with the help of the community.

⭐ Congratulations to @​jinxiao and @​dwandro for their first PR merged in the project 🎉

Changes

  • fix(logger): merged temp keys with same keys when appending to the logger (#4840) by @​sdangol
  • fix(idempotency): Update durableExecutionMode string (#4837) by @​ConnorKirk
  • feat(idempotency): Allow durable function to replay (#4834) by @​ConnorKirk
  • fix(event-handler): threshold limit for compression not respected when content-length not set (#4827) by @​svozza
  • feat(parser): fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) by @​benthorner

📜 Documentation updates

🔧 Maintenance

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/metrics's changelog.

2.30.0 (2025-12-11)

Maintenance

  • commons bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • logger bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • metrics bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • batch bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • event-handler export types for event handler middleware (#4807) (c46974c)

Bug Fixes

  • commons revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • logger merged temp keys with same keys when appending to the logger (#4840) (b30c9c4)
  • logger revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • metrics revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • idempotency Update durableExecutionMode string (#4837) (919c26d)
  • batch revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • event-handler threshold limit for compression not respected when content-length not set (#4827) (ad14e18)

Features

  • idempotency Allow durable function to replay (#4834) (4dc0798)
  • parser fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) (bf522f8)
Commits
  • dd5395b chore(ci): bump version to 2.30.0 (#4859)
  • 4e8d00b chore(deps-dev): bump aws-sdk from 2.1692.0 to 2.1693.0 (#4857)
  • 609c891 chore(deps-dev): bump markdownlint-cli2 from 0.19.1 to 0.20.0 (#4853)
  • 155fdf5 chore(deps): bump aws-cdk-lib from 2.228.0 to 2.232.1 in the aws-cdk group ac...
  • fc1831a chore(deps): bump the aws-sdk-v3 group across 1 directory with 42 updates (#4...
  • 915f47a chore(deps): bump @​types/node from 24.10.1 to 24.10.2 (#4856)
  • 22bbf77 chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#4852)
  • 69727c2 chore(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs (#4850)
  • 47c6545 chore(deps): bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847)
  • 68a71d1 chore(deps): bump esbuild from 0.27.0 to 0.27.1 (#4849)
  • Additional commits viewable in compare view

Updates @aws-lambda-powertools/tracer from 2.29.0 to 2.30.0

Release notes

Sourced from @​aws-lambda-powertools/tracer's releases.

v2.30.0

Summary

We're excited to announce AWS Lambda durable function support in Powertools for AWS Lambda TypeScript. This allows you to leverage AWS Lambda's new durable execution capabilities while taking the advantage of features such as maintaining idempotency guarantees, making it easier to build reliable serverless workflows that span multiple invocations.

AWS Lambda durable functions allow you to simplify building multi-step applications and AI workflows. These functions automatically checkpoint progress, suspend execution for up to one year during long-running tasks, and recover from failures without the need to manage additional infrastructure.

[!NOTE] Lambda function handlers using MiddyJS or Class method decorators aren’t compatible with Durable Function handlers at this time. Tracking issues: MiddyJS middyjs/middy#1531 Class Decorator aws-powertools/powertools-lambda-typescript#4832

This release also includes some bug fixes and a documentation improvement with the help of the community.

⭐ Congratulations to @​jinxiao and @​dwandro for their first PR merged in the project 🎉

Changes

  • fix(logger): merged temp keys with same keys when appending to the logger (#4840) by @​sdangol
  • fix(idempotency): Update durableExecutionMode string (#4837) by @​ConnorKirk
  • feat(idempotency): Allow durable function to replay (#4834) by @​ConnorKirk
  • fix(event-handler): threshold limit for compression not respected when content-length not set (#4827) by @​svozza
  • feat(parser): fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) by @​benthorner

📜 Documentation updates

🔧 Maintenance

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/tracer's changelog.

2.30.0 (2025-12-11)

Maintenance

  • commons bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • logger bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • metrics bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • batch bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • event-handler export types for event handler middleware (#4807) (c46974c)

Bug Fixes

  • commons revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • logger merged temp keys with same keys when appending to the logger (#4840) (b30c9c4)
  • logger revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • metrics revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • idempotency Update durableExecutionMode string (#4837) (919c26d)
  • batch revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • event-handler threshold limit for compression not respected when content-length not set (#4827) (ad14e18)

Features

  • idempotency Allow durable function to replay (#4834) (4dc0798)
  • parser fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) (bf522f8)
Commits

@dependabot
fix(lambda): bump the aws-powertools group in /lambdas with 4 updates
f27348d 
Bumps the aws-powertools group in /lambdas with 4 updates: [@aws-lambda-powertools/parameters](https://github.com/aws-powertools/powertools-lambda-typescript), [@aws-lambda-powertools/logger](https://github.com/aws-powertools/powertools-lambda-typescript), [@aws-lambda-powertools/metrics](https://github.com/aws-powertools/powertools-lambda-typescript) and [@aws-lambda-powertools/tracer](https://github.com/aws-powertools/powertools-lambda-typescript).


Updates `@aws-lambda-powertools/parameters` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/aws-powertools/powertools-lambda-typescript/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-typescript/blob/main/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-typescript@v2.29.0...v2.30.0)

Updates `@aws-lambda-powertools/logger` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/aws-powertools/powertools-lambda-typescript/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-typescript/blob/main/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-typescript@v2.29.0...v2.30.0)

Updates `@aws-lambda-powertools/metrics` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/aws-powertools/powertools-lambda-typescript/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-typescript/blob/main/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-typescript@v2.29.0...v2.30.0)

Updates `@aws-lambda-powertools/tracer` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/aws-powertools/powertools-lambda-typescript/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-typescript/blob/main/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-typescript@v2.29.0...v2.30.0)

---
updated-dependencies:
- dependency-name: "@aws-lambda-powertools/parameters"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-powertools
- dependency-name: "@aws-lambda-powertools/logger"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-powertools
- dependency-name: "@aws-lambda-powertools/metrics"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-powertools
- dependency-name: "@aws-lambda-powertools/tracer"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-powertools
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 22, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 22, 2025 19:09
@github-actions
Copy link
Contributor

github-actions bot commented Dec 22, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@aws-lambda-powertools/parameters ^2.30.0 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/logger ^2.30.0 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/metrics ^2.30.0 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/tracer ^2.30.0 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/commons 2.30.0 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/logger 2.30.0 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/metrics 2.30.0 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/parameters 2.30.0 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/tracer 2.30.0 🟢 9.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations

Scanned Files

  • lambdas/functions/control-plane/package.json
  • lambdas/libs/aws-powertools-util/package.json
  • lambdas/yarn.lock

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant