@radix-ui/react-accessible-icon

Maintainerscaution

The package is backed by an organization, but publish access also includes hadihallak at gmail.com and chancestrickland at chance.dev; these outside accounts create account-hygiene risk despite the workos.com backing.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-repository relationship is less transparent; the monorepo context partly explains the name mismatch but not the absent mention.

Repo toolingcaution

The repository uses established build tooling including TypeScript, Vite, Vitest, and npm scripts, but no security scanning tools were detected.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations less clear.

Workflow auditcaution

All four workflows were analyzed without high-confidence findings or untrusted checkouts, and no workflow has top-level write permissions. However, all eight action references are unpinned, which weakens build reproducibility.