Skip to content

Bump the npm group across 3 directories with 6 updates - #53

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-60b3789780
Dec 11, 2025
Merged

Bump the npm group across 3 directories with 6 updates#53
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-60b3789780

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Dec 11, 2025

Copy link
Copy Markdown
Contributor

Bumps the npm group with 4 updates in the / directory: @aws-lambda-powertools/logger, @types/node, constructs and aws-cdk.
Bumps the npm group with 4 updates in the /example directory: @aws-lambda-powertools/logger, @types/node, constructs and aws-cdk.
Bumps the npm group with 1 update in the /package directory: @types/node.

Updates @aws-lambda-powertools/logger from 2.29.0 to 2.30.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.30.0

Summary

We're excited to announce AWS Lambda durable function support in Powertools for AWS Lambda TypeScript. This allows you to leverage AWS Lambda's new durable execution capabilities while taking the advantage of features such as maintaining idempotency guarantees, making it easier to build reliable serverless workflows that span multiple invocations.

AWS Lambda durable functions allow you to simplify building multi-step applications and AI workflows. These functions automatically checkpoint progress, suspend execution for up to one year during long-running tasks, and recover from failures without the need to manage additional infrastructure.

[!NOTE] Lambda function handlers using MiddyJS or Class method decorators aren’t compatible with Durable Function handlers at this time. Tracking issues: MiddyJS middyjs/middy#1531 Class Decorator aws-powertools/powertools-lambda-typescript#4832

This release also includes some bug fixes and a documentation improvement with the help of the community.

⭐ Congratulations to @​jinxiao and @​dwandro for their first PR merged in the project 🎉

Changes

  • fix(logger): merged temp keys with same keys when appending to the logger (#4840) by @​sdangol
  • fix(idempotency): Update durableExecutionMode string (#4837) by @​ConnorKirk
  • feat(idempotency): Allow durable function to replay (#4834) by @​ConnorKirk
  • fix(event-handler): threshold limit for compression not respected when content-length not set (#4827) by @​svozza
  • feat(parser): fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) by @​benthorner

📜 Documentation updates

🔧 Maintenance

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.30.0 (2025-12-11)

Maintenance

  • commons bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • logger bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • metrics bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • batch bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • event-handler export types for event handler middleware (#4807) (c46974c)

Bug Fixes

  • commons revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • logger merged temp keys with same keys when appending to the logger (#4840) (b30c9c4)
  • logger revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • metrics revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • idempotency Update durableExecutionMode string (#4837) (919c26d)
  • batch revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • event-handler threshold limit for compression not respected when content-length not set (#4827) (ad14e18)

Features

  • idempotency Allow durable function to replay (#4834) (4dc0798)
  • parser fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) (bf522f8)
Commits
  • dd5395b chore(ci): bump version to 2.30.0 (#4859)
  • 4e8d00b chore(deps-dev): bump aws-sdk from 2.1692.0 to 2.1693.0 (#4857)
  • 609c891 chore(deps-dev): bump markdownlint-cli2 from 0.19.1 to 0.20.0 (#4853)
  • 155fdf5 chore(deps): bump aws-cdk-lib from 2.228.0 to 2.232.1 in the aws-cdk group ac...
  • fc1831a chore(deps): bump the aws-sdk-v3 group across 1 directory with 42 updates (#4...
  • 915f47a chore(deps): bump @​types/node from 24.10.1 to 24.10.2 (#4856)
  • 22bbf77 chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#4852)
  • 69727c2 chore(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs (#4850)
  • 47c6545 chore(deps): bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847)
  • 68a71d1 chore(deps): bump esbuild from 0.27.0 to 0.27.1 (#4849)
  • Additional commits viewable in compare view

Updates @types/node from 24.10.2 to 25.0.0

Commits

Updates constructs from 10.4.3 to 10.4.4

Release notes

Sourced from constructs's releases.

v10.4.4

10.4.4 (2025-12-11)

Bug Fixes

Commits

Updates aws-cdk from 2.1033.0 to 2.1034.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1034.0

2.1034.0 (2025-12-11)

Features

  • cli: add package manager option to cdk init (#961) (4f01af8), closes #940
  • init-templates enable test cleanup by default (#986) (82fb0f3)
  • show early validation errors on deploy (#970) (3ca8b70)

Bug Fixes

  • cli: flag report is inconsistent with warnings (#967) (6693243)
Commits
  • 82fb0f3 feat: init-templates enable test cleanup by default (#986)
  • 563f702 chore: upgrade SDK and remove process.exit (#981)
  • 4f01af8 feat(cli): add package manager option to cdk init (#961)
  • 3ca8b70 feat: show early validation errors on deploy (#970)
  • 2a6f8d3 chore: upgrade dependencies (#966)
  • 6693243 fix(cli): flag report is inconsistent with warnings (#967)
  • 33464fc chore(cli): integ tests assert telemetry successfully sent to endpoint (#775)
  • See full diff in compare view

Updates @aws-lambda-powertools/commons from 2.29.0 to 2.30.0

Release notes

Sourced from @​aws-lambda-powertools/commons's releases.

v2.30.0

Summary

We're excited to announce AWS Lambda durable function support in Powertools for AWS Lambda TypeScript. This allows you to leverage AWS Lambda's new durable execution capabilities while taking the advantage of features such as maintaining idempotency guarantees, making it easier to build reliable serverless workflows that span multiple invocations.

AWS Lambda durable functions allow you to simplify building multi-step applications and AI workflows. These functions automatically checkpoint progress, suspend execution for up to one year during long-running tasks, and recover from failures without the need to manage additional infrastructure.

[!NOTE] Lambda function handlers using MiddyJS or Class method decorators aren’t compatible with Durable Function handlers at this time. Tracking issues: MiddyJS middyjs/middy#1531 Class Decorator aws-powertools/powertools-lambda-typescript#4832

This release also includes some bug fixes and a documentation improvement with the help of the community.

⭐ Congratulations to @​jinxiao and @​dwandro for their first PR merged in the project 🎉

Changes

  • fix(logger): merged temp keys with same keys when appending to the logger (#4840) by @​sdangol
  • fix(idempotency): Update durableExecutionMode string (#4837) by @​ConnorKirk
  • feat(idempotency): Allow durable function to replay (#4834) by @​ConnorKirk
  • fix(event-handler): threshold limit for compression not respected when content-length not set (#4827) by @​svozza
  • feat(parser): fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) by @​benthorner

📜 Documentation updates

🔧 Maintenance

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/commons's changelog.

2.30.0 (2025-12-11)

Maintenance

  • commons bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • logger bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • metrics bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • batch bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • event-handler export types for event handler middleware (#4807) (c46974c)

Bug Fixes

  • commons revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • logger merged temp keys with same keys when appending to the logger (#4840) (b30c9c4)
  • logger revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • metrics revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • idempotency Update durableExecutionMode string (#4837) (919c26d)
  • batch revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • event-handler threshold limit for compression not respected when content-length not set (#4827) (ad14e18)

Features

  • idempotency Allow durable function to replay (#4834) (4dc0798)
  • parser fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) (bf522f8)
Commits
  • dd5395b chore(ci): bump version to 2.30.0 (#4859)
  • 4e8d00b chore(deps-dev): bump aws-sdk from 2.1692.0 to 2.1693.0 (#4857)
  • 609c891 chore(deps-dev): bump markdownlint-cli2 from 0.19.1 to 0.20.0 (#4853)
  • 155fdf5 chore(deps): bump aws-cdk-lib from 2.228.0 to 2.232.1 in the aws-cdk group ac...
  • fc1831a chore(deps): bump the aws-sdk-v3 group across 1 directory with 42 updates (#4...
  • 915f47a chore(deps): bump @​types/node from 24.10.1 to 24.10.2 (#4856)
  • 22bbf77 chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#4852)
  • 69727c2 chore(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs (#4850)
  • 47c6545 chore(deps): bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847)
  • 68a71d1 chore(deps): bump esbuild from 0.27.0 to 0.27.1 (#4849)
  • Additional commits viewable in compare view

Updates @aws/lambda-invoke-store from 0.2.1 to 0.2.2

Release notes

Sourced from @​aws/lambda-invoke-store's releases.

v0.2.2

Patch Changes

  • Fix context cleared prematurely in InvokeStoreSingle with async functions. Removed try-finally block that was clearing context before async operations completed. (9bed56d892dbe8473a9b8b7f3c4aa5f4e6612057)
Changelog

Sourced from @​aws/lambda-invoke-store's changelog.

0.2.2

Patch Changes

  • Fix context cleared prematurely in InvokeStoreSingle with async functions. Removed try-finally block that was clearing context before async operations completed. (9bed56d892dbe8473a9b8b7f3c4aa5f4e6612057)
Commits
  • 9f17789 Merge pull request #24 from awslabs/changeset-release/main
  • 3c3b22c Version Packages
  • b101e20 Merge pull request #23 from trivenay/main
  • 5aee9a2 test: update tests to reflect context persistence behavior
  • 9bed56d chore: add changeset for async context fix
  • 15beadd bug: fix context cleared prematurely in InvokeStoreSingle with async functions
  • See full diff in compare view

Updates @aws-lambda-powertools/logger from 2.29.0 to 2.30.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.30.0

Summary

We're excited to announce AWS Lambda durable function support in Powertools for AWS Lambda TypeScript. This allows you to leverage AWS Lambda's new durable execution capabilities while taking the advantage of features such as maintaining idempotency guarantees, making it easier to build reliable serverless workflows that span multiple invocations.

AWS Lambda durable functions allow you to simplify building multi-step applications and AI workflows. These functions automatically checkpoint progress, suspend execution for up to one year during long-running tasks, and recover from failures without the need to manage additional infrastructure.

[!NOTE] Lambda function handlers using MiddyJS or Class method decorators aren’t compatible with Durable Function handlers at this time. Tracking issues: MiddyJS middyjs/middy#1531 Class Decorator aws-powertools/powertools-lambda-typescript#4832

This release also includes some bug fixes and a documentation improvement with the help of the community.

⭐ Congratulations to @​jinxiao and @​dwandro for their first PR merged in the project 🎉

Changes

  • fix(logger): merged temp keys with same keys when appending to the logger (#4840) by @​sdangol
  • fix(idempotency): Update durableExecutionMode string (#4837) by @​ConnorKirk
  • feat(idempotency): Allow durable function to replay (#4834) by @​ConnorKirk
  • fix(event-handler): threshold limit for compression not respected when content-length not set (#4827) by @​svozza
  • feat(parser): fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) by @​benthorner

📜 Documentation updates

🔧 Maintenance

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.30.0 (2025-12-11)

Maintenance

  • commons bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • logger bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • metrics bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • batch bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847) (47c6545)
  • event-handler export types for event handler middleware (#4807) (c46974c)

Bug Fixes

  • commons revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • logger merged temp keys with same keys when appending to the logger (#4840) (b30c9c4)
  • logger revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • metrics revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • idempotency Update durableExecutionMode string (#4837) (919c26d)
  • batch revert @​aws/lambda-invoke-store to dependency (#4833) (5e728e1)
  • event-handler threshold limit for compression not respected when content-length not set (#4827) (ad14e18)

Features

  • idempotency Allow durable function to replay (#4834) (4dc0798)
  • parser fix DynamoDBStreamChangeRecordSchema.dynamodb type (#4817) (bf522f8)
Commits
  • dd5395b chore(ci): bump version to 2.30.0 (#4859)
  • 4e8d00b chore(deps-dev): bump aws-sdk from 2.1692.0 to 2.1693.0 (#4857)
  • 609c891 chore(deps-dev): bump markdownlint-cli2 from 0.19.1 to 0.20.0 (#4853)
  • 155fdf5 chore(deps): bump aws-cdk-lib from 2.228.0 to 2.232.1 in the aws-cdk group ac...
  • fc1831a chore(deps): bump the aws-sdk-v3 group across 1 directory with 42 updates (#4...
  • 915f47a chore(deps): bump @​types/node from 24.10.1 to 24.10.2 (#4856)
  • 22bbf77 chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#4852)
  • 69727c2 chore(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs (#4850)
  • 47c6545 chore(deps): bump @​aws/lambda-invoke-store from 0.2.1 to 0.2.2 (#4847)
  • 68a71d1 chore(deps): bump esbuild from 0.27.0 to 0.27.1 (#4849)
  • Additional commits viewable in compare view

Updates @types/node from 24.10.2 to 25.0.0

Commits

Updates constructs from 10.4.3 to 10.4.4

Release notes

Sourced from constructs's releases.

v10.4.4

10.4.4 (2025-12-11)

Bug Fixes

Commits

Updates aws-cdk from 2.1033.0 to 2.1034.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1034.0

2.1034.0 (2025-12-11)

Features

  • cli: add package manager option to cdk init (#961) (4f01af8), closes #940
  • init-templates enable test cleanup by default (#986) (82fb0f3)
  • show early validation errors on deploy (#970) (3ca8b70)

Bug Fixes

  • cli: flag report is inconsistent with warnings (#967) (6693243)
Commits
  • 82fb0f3 feat: init-templates enable test cleanup by default (#986)
  • Description has been truncated

Bumps the npm group with 4 updates in the / directory: [@aws-lambda-powertools/logger](https://github.com/aws-powertools/powertools-lambda-typescript), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [constructs](https://github.com/aws/constructs) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).
Bumps the npm group with 4 updates in the /example directory: [@aws-lambda-powertools/logger](https://github.com/aws-powertools/powertools-lambda-typescript), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [constructs](https://github.com/aws/constructs) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).
Bumps the npm group with 1 update in the /package directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `@aws-lambda-powertools/logger` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/aws-powertools/powertools-lambda-typescript/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-typescript/blob/main/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-typescript@v2.29.0...v2.30.0)

Updates `@types/node` from 24.10.2 to 25.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `constructs` from 10.4.3 to 10.4.4
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](aws/constructs@v10.4.3...v10.4.4)

Updates `aws-cdk` from 2.1033.0 to 2.1034.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1034.0/packages/aws-cdk)

Updates `@aws-lambda-powertools/commons` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/aws-powertools/powertools-lambda-typescript/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-typescript/blob/main/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-typescript@v2.29.0...v2.30.0)

Updates `@aws/lambda-invoke-store` from 0.2.1 to 0.2.2
- [Release notes](https://github.com/awslabs/aws-lambda-invoke-store/releases)
- [Changelog](https://github.com/awslabs/aws-lambda-invoke-store/blob/main/CHANGELOG.md)
- [Commits](awslabs/aws-lambda-invoke-store@v0.2.1...v0.2.2)

Updates `@aws-lambda-powertools/logger` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/aws-powertools/powertools-lambda-typescript/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-typescript/blob/main/CHANGELOG.md)
- [Commits](aws-powertools/powertools-lambda-typescript@v2.29.0...v2.30.0)

Updates `@types/node` from 24.10.2 to 25.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `constructs` from 10.4.3 to 10.4.4
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](aws/constructs@v10.4.3...v10.4.4)

Updates `aws-cdk` from 2.1033.0 to 2.1034.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1034.0/packages/aws-cdk)

Updates `@types/node` from 24.10.2 to 25.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@aws-lambda-powertools/logger"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 25.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: constructs
  dependency-version: 10.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1034.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@aws-lambda-powertools/commons"
  dependency-version: 2.30.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@aws/lambda-invoke-store"
  dependency-version: 0.2.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@aws-lambda-powertools/logger"
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 25.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: constructs
  dependency-version: 10.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1034.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 25.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 11, 2025
@github-actions
github-actions Bot enabled auto-merge (squash) December 11, 2025 19:20
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@aws-lambda-powertools/logger ^2.30.0 🟢 9.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@types/node ^25.0.0 🟢 6.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 23/29 approved changesets -- score normalized to 7
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/aws-cdk ^2.1034.0 UnknownUnknown
npm/constructs ^10.4.4 🟢 7.4
Details
CheckScoreReason
Maintained🟢 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Token-Permissions🟢 5detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6
npm/@types/node 25.0.0 🟢 6.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 23/29 approved changesets -- score normalized to 7
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/@aws-lambda-powertools/commons 2.30.0 🟢 9.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/logger 2.30.0 🟢 9.3
Details
CheckScoreReason
Dependency-Update-Tool🟢 10update tool detected
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 11 contributing companies or organizations
npm/@aws/lambda-invoke-store 0.2.2 UnknownUnknown
npm/@types/node 25.0.0 🟢 6.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 23/29 approved changesets -- score normalized to 7
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/aws-cdk 2.1034.0 UnknownUnknown
npm/constructs 10.4.4 🟢 7.4
Details
CheckScoreReason
Maintained🟢 1016 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Token-Permissions🟢 5detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Vulnerabilities🟢 91 existing vulnerabilities detected
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6

Scanned Files

  • example/package.json
  • package/package.json
  • pnpm-lock.yaml

@github-actions
github-actions Bot merged commit 9d6d121 into main Dec 11, 2025
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/npm-60b3789780 branch December 11, 2025 19:21
@github-actions github-actions Bot mentioned this pull request Jan 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant