Is Credential Provider Cognito Identity Safe?

What is Credential Provider Cognito Identity's trust score?

Credential Provider Cognito Identity has a Nerq Trust Score of 82.8/100, earning a A- grade. This score is based on 2 independently measured dimensions including security, maintenance, and community adoption.

What are the key security findings for Credential Provider Cognito Identity?

Credential Provider Cognito Identity's strongest signal is popularity at 100/100. No known vulnerabilities have been detected. It meets the Nerq Verified threshold of 70+.

What is Credential Provider Cognito Identity and who maintains it?

Detailed Score Analysis

Based on 5 dimensions. Data from npm registry, GitHub repository, NVD, OSV.dev, and OpenSSF Scorecard.

What data does Credential Provider Cognito Identity collect?

Credential Provider Cognito Identity is a Node.js package maintained by amzn-oss. It receives approximately 14,468,419 weekly downloads. Licensed under Apache-2.0.

As a development package, Credential Provider Cognito Identity does not directly collect end-user personal data. However, applications built with it may collect data depending on implementation. Privacy score: 80/100.

Review the package's dependencies for potential supply chain risks. Run your package manager's audit command regularly.

Full analysis: Credential Provider Cognito Identity Privacy Report · Privacy review

Is Credential Provider Cognito Identity secure?

Security score: 90/100. Credential Provider Cognito Identity has 0 known vulnerabilities (CVEs) in the National Vulnerability Database. This is a clean record.

Licensed under Apache-2.0, allowing code inspection. Open-source packages allow independent security review of the source code.

Run your package manager's audit command (`npm audit`, `pip audit`, `cargo audit`) to check for known vulnerabilities in your dependency tree.

Full analysis: Credential Provider Cognito Identity Security Report

How we calculated this score

Credential Provider Cognito Identity's trust score of 82.8/100 (A-) is computed from npm registry, GitHub repository, NVD, OSV.dev, and OpenSSF Scorecard. The score reflects 5 independent dimensions: security (90/100), maintenance (90/100), popularity (100/100), quality (80/100), community (45/100). Each dimension is weighted equally to produce the composite trust score.

Nerq analyzes over 7.5 million entities across 26 registries using the same methodology, enabling direct cross-entity comparison. Scores are updated continuously as new data becomes available.

This page was last reviewed on August 09, 2026. Data version: 1.0.

Full methodology documentation · Machine-readable data (JSON API)