@aws-sdk/middleware-host-header

Build provenancecaution

No build attestation or trusted-publisher identity is reported, leaving publication provenance less independently verifiable despite the package's strong maintenance evidence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which weakens direct package-to-repository linkage; the AWS organization-owned monorepo context provides substantial compensation.

Repo toolingcaution

The repository uses established build and test tooling, but no security scanning tools were detected; the gap is partly offset by the repository's security policy and clean workflow audit.