@aws-sdk/util-user-agent-node

Build provenancecaution

No build attestation or trusted-publisher provenance was observed. This is a transparency gap, but the package has strong release and repository activity that partly offsets it.

Repo package mentioncaution

The repository name does not match this package and its root README does not mention the package. The name mismatch is expected for a monorepo, but the lack of a package mention leaves some linkage uncertainty.

Repo toolingcaution

The repository uses established build and test tooling including TypeScript, Vitest, Turbo, and bundlers. No security scanning tools were detected, which is a minor hygiene gap rather than an abandonment concern.

Workflow auditcaution

All 12 workflows were analyzed successfully with no audit findings, untrusted checkouts, or script injections. Seven of 24 action references are unpinned and one workflow has top-level write permissions, leaving minor hygiene concerns.