@ckeditor/ckeditor5-cloud-services

Build provenancecaution

No build attestation is present, so publication provenance is less transparent; the trusted publisher is identified as CircleCI, which provides some compensating context.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, creating a package-to-repository linkage concern; the package's CKEditor monorepo file tree and organization backing partly mitigate it.

Workflow auditcaution

The audit analyzed zero workflows and found no workflow findings or failed files; this provides no negative result, but it also gives little evidence about CI workflow hygiene.