@headlessui/react

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful maintenance concern despite recent registry releases.

Repo issue activitycaution

The repository still has open issues and pull requests, but only one new issue and one new pull request in the last month, with none closed or merged; this is modest evidence of current activity.

Repo toolingcaution

The repository uses established build tooling including TypeScript, SWC, and esbuild, but no security scanning tools were detected, leaving a security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities are reported and handled.

Workflow auditcaution

All 17 analyzed action references are unpinned and one workflow grants top-level write permissions. High-confidence template-injection findings are present, but there are no pull_request_target, workflow_run, or untrusted-checkout triggers, so these are workflow-hygiene concerns rather than a severe standalone risk.