77%
Total Score
healthy
Frequent releases and active organization backing outweigh unpinned workflows and limited recent contributor diversity.
The workos.com publishing accounts fit organization backing, but hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain publishing accounts, creating account-hygiene caution rather than evidence of limited maintenance capacity.
The repository has ongoing issue and pull request activity, although only 3 pull requests were merged in the last month against 156 open pull requests, suggesting some backlog.
The repository name does not match the package and its README does not mention the package. The mismatch is plausible for a monorepo, but the missing README reference leaves package ownership less explicit.
The project uses established build tools including TypeScript, Vite, Vitest, and npm scripts, but no security scanning tools were detected.
No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@radix-ui/primitive Version 1.1.7 | — | — |
@radix-ui/react-menu Version 2.1.25 | — | — |
@radix-ui/react-context Version 1.2.2 | — | — |
@radix-ui/react-primitive Version 2.1.11 | — | — |
@radix-ui/react-use-controllable-state Version 1.2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.