82%
Total Score
healthy
Active releases and repository work support this package; concentrated commits and unpinned workflow actions are the main cautions.
The package is backed by an organization and two publishers use the workos.com domain, but hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain publishing accounts, creating a modest account-hygiene concern.
One contributor made 92.98% of the last three months' commits, leaving a meaningful concentration risk despite eight active contributors and organizational backing.
The repository name does not match the package and its README does not mention this package. Although a monorepo mismatch is ordinary, the lack of a README reference leaves package ownership less transparent.
The repository uses Vitest, Vite, TypeScript, and npm scripts, but no security-scanning tools were detected, leaving a modest assurance gap.
No repository security policy was detected, which reduces transparency for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@radix-ui/primitive Version 1.2.0 | — | — |
@radix-ui/react-dialog Version 1.3.1 | — | — |
@radix-ui/react-context Version 1.3.0 | — | — |
@radix-ui/react-primitive Version 2.2.0 | — | — |
@radix-ui/react-compose-refs Version 1.1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.