@ai-sdk/amazon-bedrock

Latest 5.0.113

NPM

87%

Total Score

healthy

Active releases, broad repository activity, and npm provenance outweigh workflow permission and checkout concerns.

Health Score Breakdown

Repo package mention

The repository name does not match the package and its README does not mention the package, creating a linkage transparency concern. The large organization-owned monorepo and package source tree partly support the relationship but do not remove the mismatch.

Workflow audit

All 13 workflows were analyzed and all action references were pinned, but the audit found a high-confidence untrusted checkout in a workflow_run workflow and high-confidence blanket GitHub App permissions in two workflows. Low-confidence cache findings are hygiene concerns only.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

vercel-release-bot

matheuss

matt.straka

Direct Dependencies

Dependency	Last Release	Score
aws4fetch Version ^1.0.20	—	—
@ai-sdk/openai Version 4.0.91	—	—
@ai-sdk/provider Version 4.0.26	—	—
@ai-sdk/anthropic Version 4.0.78	—	—
@smithy/util-utf8 Version ^4.3.3	—	—