@aws-sdk/client-cognito-identity

Build provenancecaution

No build attestation or trusted-publisher identity was recorded, leaving publication provenance less transparent than it could be; the package’s active release history and organization backing partly compensate.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, creating a linkage concern. However, the package appears in the repository’s client monorepo structure and the aws organization backing makes a mismatched monorepo name understandable.

Repo toolingcaution

The repository uses established build and test tooling, but no security-scanning tools were detected; the dedicated security policy and clean workflow audit provide some compensation.