@aws-sdk/credential-provider-cognito-identity

Repo package mentioncaution

The linked monorepo neither matches the package name nor mentions it in its README, so package ownership is less directly documented; the organization and namespace alignment provide partial context but do not remove the gap.

Repo toolingcaution

The repository uses established build and test tooling, including TypeScript, Vitest, and package build systems; the lack of detected security scanning is a minor transparency gap but is partly offset by the security policy.