ai
AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | source-size-tripled | AI (source-diff): Size increase driven by large test file additions, not bundled/injected runtime payloads. Benign for this package. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New files are test suites (.test.ts), consistent with expanding test coverage in a major SDK. No injected runtime code. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): Flagged URL (127.0.0.1:3000) is in a test fixture file, representing a localhost test server address. This is standard test code, not a real network request to a suspicious IP. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy is an artifact of comparing v6 against v4 baseline. The ai package is actively maintained by Vercel with 1155 versions; major version gaps are expected. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Maintainer removals are consistent with Vercel's organizational restructuring for a major v6 release. Publisher remains the official vercel-release-bot. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @ai-sdk/gateway is a first-party Vercel AI SDK package added as part of the v6 architecture. Not a suspicious third-party dependency. | ai | |
| dependencies | unvetted-dep:@ai-sdk/react | AI (dependencies): @ai-sdk/react is a first-party Vercel AI SDK package from the same monorepo; unvetted flag is expected and not a real risk. | ai | |
| osv | osv:GHSA-rwvc-j5jr-mgvh | AI (osv): Advisory affects 5.x versions only (< 5.0.52 and 5.1.0-beta range). Package [email protected] is not in the affected range; this finding is a false positive for the 4.x line. | ai | |
| dependencies | unvetted-dep:@ai-sdk/ui-utils | AI (dependencies): @ai-sdk/ui-utils is a first-party Vercel AI SDK package from the same monorepo; unvetted flag is expected and not a real risk. | ai | |
| typosquat | typosquat.levenshtein:hapi | AI (typosquat): 'ai' is the official Vercel AI SDK package name, not a typosquat of 'hapi'. Short name matches are false positives for this well-known package. | ai | |
| dependencies | unvetted-dep:@opentelemetry/api | AI (dependencies): @opentelemetry/api is a well-known observability library; its use in an AI SDK for tracing is expected and benign. | ai | |
| typosquat | typosquat.levenshtein:ajv | AI (typosquat): 'ai' is the official Vercel AI SDK package name, not a typosquat of 'ajv'. Short name matches are false positives for this well-known package. | ai | |
| typosquat | typosquat.levenshtein:joi | AI (typosquat): 'ai' is the official Vercel AI SDK package name, not a typosquat of 'joi'. Short name matches are false positives for this well-known package. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): 'ai' is the official Vercel AI SDK package name, not a typosquat of 'qs'. Short name matches are false positives for this well-known package. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): 'ai' is the official Vercel AI SDK package name, not a typosquat of 'pg'. Short name matches are false positives for this well-known package. | ai |
Versions (showing 27 of 327)
| Version | Deps | Published |
|---|---|---|
| 5.0.105 | 4 / 12 | |
| 5.0.104 | 4 / 12 | |
| 5.0.103 | 4 / 12 | |
| 5.0.102 | 4 / 12 | |
| 5.0.101 | 4 / 12 | |
| 5.0.100 | 4 / 12 | |
| 5.0.99 | 4 / 12 | |
| 5.0.98 | 4 / 12 | |
| 5.0.97 | 4 / 12 | |
| 5.0.96 | 4 / 12 | |
| 5.0.95 | 4 / 12 | |
| 5.0.94 | 4 / 12 | |
| 5.0.93 | 4 / 12 | |
| 5.0.92 | 4 / 12 | |
| 5.0.91 | 4 / 12 | |
| 5.0.90 | 4 / 12 | |
| 5.0.89 | 4 / 12 | |
| 5.0.88 | 4 / 12 | |
| 5.0.87 | 4 / 12 | |
| 5.0.86 | 4 / 11 | |
| 5.0.85 | 4 / 11 | |
| 5.0.84 | 4 / 11 | |
| 5.0.83 | 4 / 11 | |
| 5.0.82 | 4 / 11 | |
| 5.0.81 | 4 / 11 | |
| 5.0.80 | 4 / 11 | |
| 4.1.16 | 6 / 13 |
v5.0.105
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.104
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.103
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.102
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.101
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.100
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.99
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.98
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.97
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.96
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.95
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.94
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.93
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.92
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.91
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.90
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.89
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.88
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.87
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.86
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.85
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.84
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.83
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.82
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.81
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v5.0.80
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.1.16
2 findingsPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
CVSS 3.7 (LOW) — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.