Package Health

@ai-sdk/anthropic

Latest 4.0.78NPMNPM

84%

Total Score

healthy

Active releases and a broad contributor base outweigh workflow permission and repository-linkage concerns.

Health Score Breakdown

Repo package mentioncaution

The linked repository is the Vercel AI monorepository, so its name does not match the package and its README does not mention @ai-sdk/anthropic. The monorepo structure makes the name mismatch understandable, but the lack of a README mention leaves some package-to-repository linkage ambiguity.

Workflow auditcaution

All 13 workflows were analyzed successfully and all 78 action references are pinned, but the audit found high-confidence github-app findings, a high-confidence template-injection finding, and one untrusted checkout in a workflow_run workflow; two workflows also grant top-level write access. These are meaningful workflow-hygiene concerns, though no script injection was reported and most permissions are read-only.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
@ai-sdk/provider
Version 4.0.26
—
—
@ai-sdk/provider-utils
Version 5.0.58
—
—

Weekly Downloads

Info

Last Published
3 days ago
Created
2 years ago
Unpacked Size
2.3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform