@ai-sdk/azure

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about package-to-source identification; the package's source files are nevertheless visible in the repository tree.

Workflow auditcaution

All 13 workflows were analyzed with no failed files and all 78 action references pinned, but one workflow combines workflow_run with an untrusted checkout, and two high-confidence github-app findings report blanket app-token permissions. These are meaningful CI supply-chain hygiene concerns; the repeated low-confidence cache findings and template-injection finding add limited weight.