@aws-sdk/middleware-bucket-endpoint

Build provenancecaution

No build attestation or trusted-publisher provenance was detected, leaving publication origin less transparent than an attested release; the package's long release history and organizational backing reduce but do not eliminate this concern.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it. A name mismatch is normal for a monorepo, but the lack of any package reference creates a modest ownership-transparency concern.

Workflow auditcaution

All 12 workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection. Seven of 24 action references are unpinned and one workflow has top-level write permissions, which are minor hygiene concerns without an untrusted trigger.