@aws-sdk/eventstream-handler-node

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable than an attested release.

Repo package mentioncaution

The linked repository is a monorepo whose name does not match this subpackage and whose README does not mention it. A name mismatch is ordinary for a monorepo, but the lack of a README mention leaves package-to-repository linkage slightly less transparent.

Repo toolingcaution

The repository uses established build and test tooling and has a build tool, but no security-scanning tools were detected. The missing scanner is a modest hygiene gap rather than evidence of abandonment.

Workflow auditcaution

All 12 workflows were analyzed with no audit findings, no untrusted checkouts, and no script-injection paths. Seven of 24 action references are unpinned and one workflow has top-level write permissions, leaving minor workflow hygiene concerns.