@aws-sdk/middleware-sdk-sqs

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable despite the package's strong maintenance evidence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, which creates a repository-identity caveat. The organization-backed monorepo context partly compensates for that concern.

Repo toolingcaution

The repository uses established build and test tooling, including TypeScript, Vitest, and multiple bundlers. No security scanning tools were detected, which is a minor transparency gap but not decisive here because a security policy is present.