@ai-sdk/openai-compatible

Repo package mentioncaution

The linked Vercel monorepo does not match the package name and its README does not mention @ai-sdk/openai-compatible, which creates some uncertainty about the package-to-repository association despite the organization backing.

Workflow auditcaution

All 13 workflows were analyzed and all action references are pinned, but two workflows grant top-level write access, one workflow combines workflow_run with an untrusted checkout, and high-confidence github-app and template-injection findings remain. The many cache-poisoning findings are low-confidence hygiene concerns.