@aws-sdk/client-bedrock-agent-runtime

Build provenancecaution

No build attestation or trusted-publisher provenance was reported. The active project and release history compensate for some of this transparency gap, but the artifact's publication path is less independently verifiable.

Repo package mentioncaution

The repository name does not match this package and its top-level README does not mention it, creating some attribution uncertainty. The package is an expected subpackage of a large AWS SDK monorepo, so this is a limited caution rather than a severe concern.

Repo toolingcaution

The repository uses established TypeScript, test, bundling, and build tools, but no security-scanning tools were reported. The repository's security policy and clean workflow audit partly offset this tooling gap.