@ai-sdk/deepseek

Repo package mentioncaution

The repository name does not match the package and its README does not mention @ai-sdk/deepseek, creating some uncertainty that this repository directly represents the package rather than the broader monorepo.

Workflow auditcaution

All 13 workflows were analyzed and action references are fully pinned, but one workflow combines an untrusted checkout with a workflow_run trigger, two workflows grant top-level write permissions, and high-confidence github-app findings report blanket app-token permissions. The cache findings are low-confidence hygiene issues and do not independently add weight.