@aws-sdk/client-bedrock-runtime

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable despite the package's active project evidence.

Repo package mentioncaution

The repository name does not match this client package and its README does not mention the package, which weakens package-to-repository traceability; the organization-owned monorepo context partly explains the name mismatch but not the missing mention.

Repo toolingcaution

The project uses substantial build tooling and testing frameworks, but no security-scanning tools were detected; that is a modest transparency and hygiene gap.