aws-sdk-client-mock

Build provenancecaution

No build attestation or trusted-publisher provenance is available, so consumers have less independent evidence that the published artifact corresponds to the source build.

Dangerous workflowscaution

One workflow uses pull_request_target, which can increase CI risk when handling untrusted pull requests, although no untrusted checkout or script-injection patterns were detected.

Project backingcaution

The repository is owned by an individual rather than an organization, so continuity depends on a relatively narrow ownership base; this is partly offset by the repository's substantial documentation and history.

Release historycaution

The package has 40 releases over more than five years, but its latest registry release was on October 15, 2024 and there were no releases in the following 12 months, indicating a meaningful maintenance slowdown.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months; combined with the old latest release, this is the strongest evidence of currently slow maintenance.