@aws-sdk/client-cloudfront

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent than it could be; the active organization-backed project provides some compensation.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @aws-sdk/client-cloudfront, so the package-to-repository relationship is less directly evidenced; the AWS SDK monorepo context partly compensates.

Repo toolingcaution

The repository uses established build and test tooling and has a build tool; no security-scanning tools were detected, which is a modest transparency gap rather than an abandonment concern.