@radix-ui/react-dropdown-menu

Maintainerscaution

The primary publish domain is workos.com, consistent with the organization-owned project. The gmail.com account hadihallak and chance.dev account chancestrickland are outside identities, creating account-hygiene caution despite the company-backed setup.

Repo bus factorcaution

Only 2 contributors were active in the last 3 months, and one made 98.9% of commits. Organization backing partly compensates, but the recent activity remains highly concentrated.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. A monorepo can explain the name mismatch, but the lack of a README mention makes package ownership less transparent.

Repo toolingcaution

The project uses build tooling such as Vitest, Vite, npm scripts, and TypeScript, but no security scanning tools were detected; this is a modest transparency gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.