@applitools/ec-client

Build provenancecaution

The release has no build attestation and does not use staged publishing, leaving artifact provenance less independently verifiable despite a trusted publisher identifier of github.

Dependency profilecaution

Nine runtime dependencies create moderate transitive maintenance and supply-chain surface, but the profile is not unusually large for a client package.

Maintainerscaution

Most publish-access accounts use the applitools.com domain, showing company backing; the listed consumer-domain accounts yotammadem, ormeda, clementbarry, gofilord, grayscale64, dockermaster, anandbagmar, and adamcarmi are account-hygiene cautions, not evidence of a weak maintainer base.

Package scaffoldingcaution

A changelog is included, while the missing README reduces consumer documentation; absent tests are normal for a published artifact and are not a concern by themselves.