Is Middleware Signing Safe?

What is Middleware Signing's trust score?

Middleware Signing has a Nerq Trust Score of 83.8/100, earning a A- grade. This score is based on 2 independently measured dimensions including security, maintenance, and community adoption.

What are the key security findings for Middleware Signing?

Middleware Signing's strongest signal is security at 90/100. No known vulnerabilities have been detected. It meets the Nerq Verified threshold of 70+.

What is Middleware Signing and who maintains it?

Detailed Score Analysis

Based on 5 dimensions. Data from npm registry, GitHub repository, NVD, OSV.dev, and OpenSSF Scorecard.

What data does Middleware Signing collect?

Middleware Signing is a Node.js package maintained by amzn-oss. It receives approximately 5,109,341 weekly downloads. Licensed under Apache-2.0.

As a development package, Middleware Signing does not directly collect end-user personal data. However, applications built with it may collect data depending on implementation. Privacy score: 80/100.

Review the package's dependencies for potential supply chain risks. Run your package manager's audit command regularly.

Full analysis: Middleware Signing Privacy Report · Privacy review

Is Middleware Signing secure?

Security score: 90/100. Middleware Signing has 0 known vulnerabilities (CVEs) in the National Vulnerability Database. This is a clean record.

Licensed under Apache-2.0, allowing code inspection. Open-source packages allow independent security review of the source code.

Run your package manager's audit command (`npm audit`, `pip audit`, `cargo audit`) to check for known vulnerabilities in your dependency tree.

Full analysis: Middleware Signing Security Report

How we calculated this score

Middleware Signing's trust score of 83.8/100 (A-) is computed from npm registry, GitHub repository, NVD, OSV.dev, and OpenSSF Scorecard. The score reflects 5 independent dimensions: security (90/100), maintenance (100/100), popularity (90/100), quality (80/100), community (45/100). Each dimension is weighted equally to produce the composite trust score.

Nerq analyzes over 7.5 million entities across 26 registries using the same methodology, enabling direct cross-entity comparison. Scores are updated continuously as new data becomes available.

This page was last reviewed on June 17, 2026. Data version: 1.0.

Full methodology documentation · Machine-readable data (JSON API)