@ai-sdk/mistral

Repo package mentioncaution

The repository name does not match the package and its README does not mention @ai-sdk/mistral, creating a package-to-repository transparency gap; the Vercel organization and monorepo structure partly compensate for this.

Workflow auditcaution

All 13 workflows were analyzed and action references are pinned, but a workflow_run workflow performs an untrusted checkout and two workflows grant top-level write access; high-confidence blanket app permissions also need tightening. The cache-poisoning findings are low confidence and do not materially change the assessment.