@aws-lite/client

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Version stabilitycaution

Version 0.24.0 is not yet at a stable major version, so API compatibility may require more care, although it is not a prerelease and recent prereleases represent only 20% of releases.

Workflow auditcaution

All 10 action references are unpinned, and the audit found two high-confidence template-injection findings plus a low-confidence package installation outside a lockfile. The workflow has no pull_request_target or workflow_run trigger and uses job-level permissions, limiting the impact of these findings.