@aws-sdk/client-ssm

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving release origin less independently verifiable despite the package's strong maintenance evidence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @aws-sdk/client-ssm, so the package-to-repository link is less transparent; the monorepo structure makes the name mismatch ordinary but does not remove the missing mention.

Repo toolingcaution

The repository uses established build and test tooling, including TypeScript, Vitest, and multiple bundlers; security-scanning tools were not detected, a modest transparency gap.