@radix-ui/react-dialog

Maintainerscaution

The package is backed by an organization, but publishing access also includes hadihallak using gmail.com and chancestrickland using chance.dev. Those accounts are weaker account-hygiene signals, though the workos.com publishers provide compensation.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @radix-ui/react-dialog. This may be normal for a monorepo, but it leaves package-to-repository linkage less explicit.

Repo toolingcaution

The repository uses established build tools including Vitest, Vite, TypeScript, and npm scripts. No security scanning tools were detected, leaving a modest tooling gap.

Security policycaution

No repository security policy was found. This is a transparency gap, although the active repository and provenance provide some compensating evidence.

Workflow auditcaution

All four workflows were analyzed without high- or medium-severity findings and without untrusted checkouts or script injection. However, all eight action references are unpinned, which weakens build reproducibility.