← Home

@ai-sdk/provider-utils

27
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

vercel-release-botmatheussmatt.straka

Keywords

ai

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata no-description AI (npm-metadata): Minor metadata gap; package is clearly legitimate with 17M weekly downloads. ai
provenance publisher-changed AI (provenance): Legitimate transition from jaredpalmer (Vercel employee) to vercel-release-bot (Vercel's automated release account). Both are within the Vercel org. ai
provenance missing-githead AI (provenance): Consistent with move to bot-based CI/CD publishing at Vercel; not a security concern for this package. ai
maintainer-change maintainer-added AI (maintainer-change): vercel-release-bot added as part of standard Vercel org transition to automated releases. ai
npm-metadata suspicious-initial-version AI (npm-metadata): Version 0.0.0 is a known monorepo workspace placeholder pattern used by the Vercel AI SDK; not indicative of malicious intent for this package. ai
bogus-package bogus-package AI (bogus-package): 17M weekly downloads and 738-day history confirm this is a legitimate, high-value package despite sparse README/description metadata. ai

Versions (showing 27 of 127)

Show 143 prereleases
Version Deps Published
1.0.9 4 / 6
1.0.8 4 / 6
1.0.7 4 / 6
1.0.6 4 / 6
1.0.5 4 / 6
1.0.4 4 / 6
1.0.3 4 / 6
1.0.2 4 / 6
1.0.1 4 / 6
1.0.0 4 / 6
0.0.16 4 / 6
0.0.15 4 / 6
0.0.14 4 / 6
0.0.13 4 / 6
0.0.12 4 / 6
0.0.11 4 / 6
0.0.10 4 / 6
0.0.9 4 / 6
0.0.8 4 / 6
0.0.7 4 / 6
0.0.6 4 / 6
0.0.5 4 / 6
0.0.4 4 / 6
0.0.3 4 / 6
0.0.2 4 / 6
0.0.1 4 / 6
0.0.0 4 / 6