@aws-sdk/client-personalize-events

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable than it could be.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention this package, which is a transparency caution; the package is evidently part of a larger monorepo, so the mismatch alone is not conclusive.

Repo toolingcaution

The project uses established build and test tooling, but no security-scanning tools were detected; the repository's security policy provides some compensating transparency.