The SES email provider currently depends on the node-ses package, which is now deprecated and unmaintained:
It would be great if the SES email provider could be migrated to using the official AWS SDK instead:
This would bring two significant benefits:
  1. The node-ses package only supports static IAM user credentials. In most cases it would be preferable to use IAM roles instead, and the AWS SDK supports these.
  2. The node-ses package currently depends on 3 other packages with security vulnerabilities in them. Migrating to the AWS SDK instead would resolve these vulnerabilities.
It looks like there was a previous attempt to make this change, so hopefully it should be straightforward.