@aligent/cdk-prerender-fargate

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the package-to-source relationship is less transparent. The organization match provides some context but does not remove the mismatch.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a modest transparency gap, not evidence of abandonment.

Workflow auditcaution

All six workflows were analyzed, with no untrusted checkout or script-injection trigger issues, but 23 of 24 action references are unpinned. A high-confidence template-injection finding and a high-confidence low-severity ad hoc package install also weaken workflow hygiene.