@ai-sdk/google-vertex

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, which makes the package-to-repository relationship less transparent; the monorepo context partly explains the name mismatch but not the absent README mention.

Workflow auditcaution

All 13 workflows were analyzed and all action references are pinned, but one workflow combines workflow_run with an untrusted checkout and two workflows grant top-level write access; high-confidence broad app permissions also add risk. Low-confidence cache findings are hygiene concerns only.