@ai-sdk/mistral

Repo package mentioncaution

The repository name does not match the package and its README does not mention @ai-sdk/mistral; while a monorepo mismatch is normal, both indicators together weaken package-specific traceability.

Workflow auditcaution

All 13 workflows were analyzed and all 78 action references are pinned, but one workflow combines workflow_run with an untrusted checkout, and two workflows grant top-level write access. High-confidence github-app and template-injection findings add workflow hygiene concerns; the cache-poisoning findings are low confidence and remain hygiene concerns.