@aws-sdk/credential-provider-node

Build provenancecaution

No build attestation or trusted-publisher identity was recorded, leaving publication provenance less transparent. This is a modest gap rather than a maintenance concern because the package has active AWS-backed development and a stable release history.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating some uncertainty about package-to-repository linkage. The AWS monorepo context and matching organization backing partly compensate for this indirect relationship.

Repo toolingcaution

The repository uses TypeScript, Vitest, and multiple build tools, with a defined build system. No security-scanning tools were detected, which is a minor transparency gap but not decisive given the other evidence.