@aws-sdk/middleware-endpoint-discovery

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable. This is a transparency gap but not evidence of abandonment.

Repo package mentioncaution

The linked repository is a monorepo whose name does not match this subpackage and whose root README does not mention it. The mismatch is normal for a monorepo, but the lack of a package-specific mention leaves some ownership ambiguity.

Repo toolingcaution

The repository uses established build and test tooling including TypeScript, Vitest, Turbo, and bundlers. No security-scanning tools were detected, which is a minor process gap.