@radix-ui/react-arrow

Maintainerscaution

The package is backed by an organization, but hadihallak (gmail.com) and chancestrickland (chance.dev) publish outside the primary workos.com domain, creating account-hygiene risk.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @radix-ui/react-arrow, so package-to-source ownership is less transparent despite the ordinary monorepo context.

Repo toolingcaution

The project uses TypeScript, Vite, Vitest, and npm scripts, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The linked repository has no security policy, making vulnerability-reporting expectations less transparent for consumers.

Version stabilitycaution

Version 1.1.17 is a stable, non-prerelease release, although 75% of recent releases being prereleases adds some release-channel complexity.