aisdk/vercel

Release historycaution

The package is only 58 days old with two releases, both published on the same day, so there is little evidence of an established maintenance cadence.

Repo bus factorcaution

One contributor made all two recent commits, creating a concentrated maintenance base; organization backing partly reduces handoff risk but does not provide evidence of a second active maintainer.

Repo commit activitycaution

Only two commits were recorded in the last three months, which is limited activity for a newly released provider and leaves maintenance continuity uncertain.

Version stabilitycaution

Version v0.8.1 is not a stable major release, which signals an API that may still change even though it is not marked as a prerelease.

Workflow auditcaution

The single workflow is fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. However, both action references are unpinned, leaving avoidable workflow supply-chain exposure.