@ai-sdk/openai-compatible

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. Although a monorepo mismatch is ordinary, the absence of any README mention leaves package ownership less transparent.

Workflow auditcaution

All 13 workflows were analyzed and all action references are pinned, but one workflow combines an untrusted checkout with a workflow_run trigger, and high-confidence findings report blanket GitHub App permissions and template injection. Most cache findings are low-confidence hygiene issues, but the confirmed workflow weaknesses warrant caution.