aws-cdk.aws-signer

v1.162.0

The CDK Construct Library for AWS::Signer

PyPI

README

GitHub

Apache-2.0

Latest version published 2 days ago

    pip install aws-cdk-aws-signer

We couldn't find any similar packages Browse all packages

Package Health Score

93 / 100

Security
No known security issues
Popularity
Popular
Maintenance
Healthy
Community
Active

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Secure Your Project

Find & fix vulnerable dependencies and insecure code

Popularity

Popular

Total Weekly Downloads (98,682)

Dependents: 0
GitHub Stars: 8.87K
Forks: 2.54K
Contributors: 410

Direct Usage Popularity

The PyPI package aws-cdk.aws-signer receives a total of 98,682 downloads a week. As such, we scored aws-cdk.aws-signer popularity level to be Popular.

Based on project statistics from the GitHub repository for the PyPI package aws-cdk.aws-signer, we found that it has been starred 8,871 times, and that 0 other projects in the ecosystem are dependent on it.

The download numbers shown are the average weekly downloads from the last 6 weeks.

Security

No known security issues

Security and license risk for latest version

Release Date: Jul 1, 2022
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
0
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

Apache-2.0

Security Policy

We found a way for you to contribute to the project! Looks like aws-cdk.aws-signer is missing a security policy.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Healthy

Commit Frequency

Open Issues: 1.78K
Open PR: 129
Last Release: 2 days ago
Last Commit: 15 hours ago

Further analysis of the maintenance status of aws-cdk.aws-signer based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that aws-cdk.aws-signer demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Active

Readme: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 410
Funding: No

A good and healthy external contribution signal for aws-cdk.aws-signer project, which invites more than one hundred open source maintainers to collaborate on the repository.

Embed Package Health Score Badge

Package

Python Versions Compatibility: ~=3.7

Age: 2 years
Latest Release: 2 days ago
Dependencies: 0
Versions: 98
Maintainers: 2
Wheels: OS Independent

Readme

AWS::Signer Construct Library

---

AWS Signer is a fully managed code-signing service to ensure the trust and integrity of your code. Organizations validate code against a digital signature to confirm that the code is unaltered and from a trusted publisher. For more information, see What Is AWS Signer?

Signing Platform

A signing platform is a predefined set of instructions that specifies the signature format and signing algorithms that AWS Signer should use to sign a zip file. For more information go to Signing Platforms in AWS Signer.

AWS Signer provides a pre-defined set of signing platforms. They are available in the CDK as -

Platform.AWS_IOT_DEVICE_MANAGEMENT_SHA256_ECDSA
Platform.AWS_LAMBDA_SHA384_ECDSA
Platform.AMAZON_FREE_RTOS_TI_CC3220SF
Platform.AMAZON_FREE_RTOS_DEFAULT

Signing Profile

A signing profile is a code-signing template that can be used to pre-define the signature specifications for a signing job. A signing profile includes a signing platform to designate the file type to be signed, the signature format, and the signature algorithms. For more information, visit Signing Profiles in AWS Signer.

The following code sets up a signing profile for signing lambda code bundles -

signing_profile = signer.SigningProfile(self, "SigningProfile",
    platform=signer.Platform.AWS_LAMBDA_SHA384_ECDSA
)

A signing profile is valid by default for 135 months. This can be modified by specifying the signatureValidityPeriod property.

aws-cdk.aws-signer dependencies

aws-cdk-core constructs jsii publication

FAQs

What is aws-cdk.aws-signer?

The CDK Construct Library for AWS::Signer. Visit Snyk Advisor to see a full health score report for aws-cdk.aws-signer, including popularity, security, maintenance & community analysis.

Is aws-cdk.aws-signer popular?

The python package aws-cdk.aws-signer receives a total of 98,682 weekly downloads. As such, aws-cdk.aws-signer popularity was classified as a popular. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is aws-cdk.aws-signer well maintained?

We found that aws-cdk.aws-signer demonstrated a healthy version release cadence and project activity. It has a community of 410 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is aws-cdk.aws-signer safe to use?

The python package aws-cdk.aws-signer was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 2 July-2022, at 14:56 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP