@ai-sdk/openai-compatible

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the linkage is less transparent. The mismatch could be normal for a monorepo, but the absence of a package mention remains a caution.

Workflow auditcaution

All 13 workflows were analyzed with no failures and all 78 action references pinned. However, release-notifications.yml combines a workflow_run trigger, an untrusted checkout, and top-level write permissions; two high-confidence github-app findings also report blanket installation permissions. Low-confidence cache findings are hygiene concerns only.