@mariozechner/pi-ai
Unified LLM API with automatic model discovery and provider configuration
35%
Total Score
100
89
83
50
Health Score Breakdown
The registry marks the entire package as deprecated and directs users to @earendil-works/pi-ai, making this release a poor target for new dependencies even though the project remains active.
No build provenance attestation or trusted-publisher identity is present, leaving publication origin less verifiable despite the package's active project and repository signals.
All 10 workflows were analyzed, all 39 action references are pinned, and no untrusted checkout or script-injection paths were found. Low-confidence cache findings and one high-confidence low-severity ad hoc package installation are hygiene concerns, not a decisive risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 chalk Version ^5.6.2 | — | — |
openai Version 6.26.0 | — | — |
undici Version ^7.19.1 | — | — |
typebox Version ^1.1.24 | — | — |
proxy-agent Version ^6.5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 1 year ago
- Unpacked Size
- 4.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.