aws-delivlib
A library for defining continuous delivery pipelines for multi-language code libraries using AWS CodeBuild and CodePipeline.
What is aws-delivlib?
aws-delivlib is a CDK library for defining and managing continuous delivery pipelines specifically for code libraries that target multiple programming languages. It automates the build, test, and publish stages using AWS CodeBuild and CodePipeline, ensuring consistent and reliable releases across package managers like npm, NuGet, Maven Central, and PyPI.
Library maintainers and DevOps engineers who need to automate the release process for multi-language projects, particularly those using AWS infrastructure and the CDK for infrastructure-as-code.
It provides a unified, idempotent pipeline definition that handles the complexity of publishing to multiple package managers, integrates code signing, and offers built-in validation and monitoring, reducing manual effort and ensuring release consistency.
Overview
setup and manage continuous delivery pipelines for code libraries in multiple languages
Use Cases
Best For
- Automating releases for libraries built with jsii that target multiple languages
- Setting up CI/CD pipelines for AWS CDK constructs or similar multi-language projects
- Managing code signing and certificate provisioning for NuGet and Maven packages
- Validating package integrity to detect compromised artifacts
- Mirroring Docker images from DockerHub to ECR to avoid throttling
- Configuring pull request builds and automatic version bumps for continuous delivery
Not Ideal For
- Teams publishing only to a single package manager without multi-language complexity
- Projects not using AWS CDK or preferring cloud-agnostic CI/CD tools like GitHub Actions
- Organizations with tight budgets or concerns about AWS vendor lock-in and ongoing costs
Pros & Cons
Pros
Supports npm, NuGet, Maven Central, PyPI, GitHub Releases, and Pages with built-in publishers, enabling consistent releases across platforms as detailed in the Publish section.
Leverages AWS CodeBuild and CodePipeline for orchestration, with features like ECR mirroring to avoid DockerHub throttling, reducing manual infrastructure setup.
Publishers are designed to skip existing versions, preventing duplicate releases and ensuring reliable automation, as emphasized in the Philosophy section.
Includes failure notifications to Slack/Chime and package integrity validation to detect compromises, enhancing pipeline robustness and security.
Cons
The README marks it as experimental with a stability badge, indicating potential instability, breaking changes, and lack of long-term support assurances.
Heavily dependent on AWS services like Secrets Manager and CodeBuild, making migration difficult and incurring ongoing costs, unsuitable for multi-cloud setups.
Requires intricate configuration for code signing, such as GPG keys for Maven and certificates for NuGet, which can be error-prone and time-consuming.
Frequently Asked Questions
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.