Go modules · proxy.golang.org

github.com/aws-amplify/amplify-js

Credential file access

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v6.12.3-0.20260818135855-36e3ce199839+incompatible`	Review	50	2026-08-29
`v0.2.1-0.20240923204920-63bceabcaf00`	Review	21	2026-08-29
`v6.12.3-0.20250325222121-2997fc99e95e+incompatible`	Review	24	2026-08-29
`v0.2.1-0.20241120230312-30abdbd853b2`	Review	21	2026-08-29
`v0.2.1-0.20240930213736-56ded04a14ba`	Review	21	2026-08-29
`v0.2.1-0.20240807234604-917ca35b6823`	Review	14	2026-08-02
`v0.2.1-0.20241125231410-9fb4fc24621f`	Review	14	2026-08-02
`v6.12.3-0.20260730122941-fce32a9bed56+incompatible`	Review	35	2026-08-02
`v6.12.3-0.20260716132706-49d9e82c5e9d+incompatible`	Low risk	0	2026-07-19

Verdict reflects the highest-severity signal, not just the additive score: a single high-severity finding outranks a higher score made up of lower-severity ones, so a lower-scored version can still carry the stronger verdict.

Block this in CI

PkgRadar gates github.com/aws-amplify/amplify-js (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem go github.com/aws-amplify/[email protected]+incompatible

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.

Start free — 25 scans / mo View full evidence