@aws-sdk/xml-builder

Package scaffoldingcaution

The package includes a README that explicitly identifies it as an internal API and advises against direct application dependencies; repository tests and a changelog provide project-level support. The missing test and changelog files in the artifact are normal for published compiled output.

Repo package mentioncaution

The linked repository is an AWS SDK monorepo, but it neither matches this package name nor mentions it in the README. That creates some package-to-repository transparency risk, although the organization-backed monorepo context partly compensates.

Repo toolingcaution

The repository uses established build and test tooling, including TypeScript, Vitest, and multiple bundlers, but no security scanning tools were detected. The missing scanning is a minor transparency gap rather than evidence of abandonment.