@aws-sdk/client-s3 npm Security Score: 92/100

npm publishers

Distributed credential risk

26M

downloads/week

Blast radius if compromised

6.3y

package age

Established package

2 days ago

last release

Active maintenance

growing

download trend

Week-over-week trajectory

Risk analysis

@aws-sdk/client-s3 shows healthy behavioral signals: multiple publishers distribute the credential risk, and the package is actively maintained.

Publisher depth — How many people can push to npm? Single-publisher packages are the #1 structural risk.
Longevity — Older packages have track records. New packages with high adoption are higher risk.
Release consistency — Regular releases signal active oversight. Long gaps mean unpatched vulnerabilities.
Download trend — Growing packages attract more scrutiny (and more attacks).
OpenSSF Scorecard — Process security: branch protection, code review, CI/CD safety.

You came looking for @aws-sdk/client-s3. Your node_modules has hundreds more. Run one command to score every dependency you ship:

npx proof-of-commitment

Auto-detects your lockfile. Scores every dependency. Zero install.

![Commit Trust](https://getcommit.dev/badge/npm/@aws-sdk/client-s3)