@ai-sdk/perplexity

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating some uncertainty about package-to-repository linkage; this is partly expected for a monorepo but remains a transparency gap.

Workflow auditcaution

All 13 workflows were analyzed and references are fully pinned, but high-confidence findings include blanket GitHub App permissions, template injection, and an untrusted checkout in a workflow_run path; the low-confidence cache findings are mainly hygiene.