@radix-ui/colors

Build provenancecaution

The release has no build attestation or trusted publisher identity, so consumers cannot independently verify how the artifact was produced. This is a transparency weakness, though not evidence of maliciousness.

Release historycaution

The package has 26 releases and has existed since May 2021, but it has had no releases in the last 12 months and was last updated in October 2023. That prolonged inactivity raises maintenance risk for a dependency.