Is @aws-sdk/credential-provider-sso safe to use?

@aws-sdk/credential-provider-sso has no known vulnerabilities on the latest version (3.972.37). DepScope rates its health at 93/100 (low risk).

What is the latest version of @aws-sdk/credential-provider-sso?

The latest version of @aws-sdk/credential-provider-sso is 3.972.37, released 2026-04-29.

Does @aws-sdk/credential-provider-sso have known vulnerabilities?

No known vulnerabilities on the latest version of @aws-sdk/credential-provider-sso.

Is @aws-sdk/credential-provider-sso deprecated?

No, @aws-sdk/credential-provider-sso is actively maintained. Latest release: 3.972.37 (2026-04-29).

What are alternatives to @aws-sdk/credential-provider-sso?

Popular alternatives to @aws-sdk/credential-provider-sso in npm include: semver, debug, minimatch, strip-ansi, ms.

What license does @aws-sdk/credential-provider-sso use?

@aws-sdk/credential-provider-sso is licensed under Apache-2.0.

@aws-sdk/credential-provider-sso

npmv3.972.37

AWS credential provider that exchanges a resolved SSO login token file for temporary AWS credentials

License Apache-2.0permissive478 versions2 maintainers8 deps58,558,409 weekly dl

aws/aws-sdk-js-v3

/ 100

Health

safe to use

@aws-sdk/[email protected] is safe to use (health: 93/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

8/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

9.5 KBminified

3.6 KB gzipped

8 direct dependencies

ESMscoped

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.78critical

Download trend

stable(+4.2%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (8)

@aws-sdk/core @aws-sdk/nested-clients @aws-sdk/token-providers @aws-sdk/types @smithy/property-provider @smithy/shared-ini-file-loader @smithy/types tslib

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@aws-sdk/credential-provider-sso