@aws-sdk/client-secrets-manager

Build provenancecaution

No build attestation or trusted-publisher identity was reported, leaving publication provenance less transparent despite the strong maintenance evidence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, so the mapping is less explicit; the organization-backed monorepo context partly explains the mismatch but does not remove the transparency concern.

Repo toolingcaution

The repository uses established build and test tooling, including TypeScript and Vitest, but no security-scanning tools were detected, leaving a modest hygiene gap.