Convert to aws sdk v3, switch to npm

[xdumaine]

breaking change. I think I'd like to switch to npm also before doing a major version bump

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@aws-sdk/[email protected]	Transitive: environment, filesystem, network, shell	+85	7.59 MB	aws-sdk-bot
npm/@aws-sdk/[email protected]	Transitive: environment, filesystem, network	+25	1.38 MB	aws-sdk-bot
npm/@jupiterone/[email protected]	Transitive: environment, eval, filesystem, shell, unsafe	+138	52.1 MB	jupiterone-dev
npm/@jupiterone/[email protected]	filesystem Transitive: environment, eval, network, shell, unsafe	+469	91.3 MB	jupiterone-dev
npm/@lifeomic/[email protected]	None	0	33.5 kB	lifeomicdev
npm/@types/[email protected]	Transitive: environment, filesystem, unsafe	+42	1.67 MB	types
npm/@types/[email protected]	None	+1	865 kB	types
npm/@types/[email protected]	None	+1	866 kB	types
npm/@types/[email protected]	None	0	6.67 kB	types
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell, unsafe	+273	19.4 MB	simenb
npm/[email protected]	environment, filesystem, shell Transitive: network	+29	1 MB	remy
npm/[email protected]	environment, filesystem, unsafe Transitive: eval, network, shell	+147	46.8 MB	kul

🚮 Removed packages: npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@jupiterone/[email protected], npm/@jupiterone/[email protected], npm/@lifeomic/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

[xdumaine]

🤦🏽 I completely missed #48 but it looks like we did basically the same thing, with a few small differences. @zemberdotnet apologies for the duplication. If you're good with this, want to go with this one since it also includes node upgrade and doesn't require conflict resolution? I pulled in a couple key things from yours that I missed.

[boostsecurity-io]

⚠️  1 New Security Finding

The latest commit contains 1 new security finding.

Findings
Dependency: npm / braces@ 3.0.2 Vulnerability Information Vulnerability Severity CVSS EPSS Affected Versions Fixed Versions Contains Malware Description CVE-2024-4068 Critical 7.5 0.04% 3.0.3 no Uncontrolled resource consumption in braces
Dependency Location https://github.com/JupiterOne/dynamodb-dao/blob/aa4732bc28e19a33bd139e95ef8e3c5864e2685c/package-lock.json

Not a finding? Ignore it by adding a comment on the line with just the word noboost.

Scanner: boostsecurity - BoostSecurity osv-scanner