@dnd-kit/react

Repo toolingcaution

The repository uses Turbo and npm scripts for builds, but no security-scanning tooling was detected; this is a modest transparency gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found, reducing disclosure transparency, although active commits, releases, and provenance provide compensating maintenance evidence.

Version stabilitycaution

Version 0.5.1 is not a prerelease, but 90% of recent releases are prereleases and the package has not reached a stable major version, which adds some API maturity uncertainty.

Workflow auditcaution

All five workflows were analyzed with read-only permissions and no untrusted checkout or script-injection paths. However, 29 of 33 action references are unpinned and the release workflow has a high-confidence low-severity adhoc package installation.