@aws-sdk/middleware-flexible-checksums

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, leaving publication origin less independently verifiable despite the package's strong maintenance evidence.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention the package, creating some linkage uncertainty; the organization-backed monorepo context partly compensates for that gap.