@radix-ui/react-focus-guards

Maintainerscaution

The package has four publishing accounts and clear WorkOS organization backing, but hadihallak (gmail.com) and chancestrickland (chance.dev) use outside-domain accounts, creating account-hygiene caution.

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, which creates some ownership ambiguity; the mismatch is plausibly explained by this package being part of a monorepo.

Repo toolingcaution

The repository uses established build and test tooling including Vitest, Vite, TypeScript, and npm scripts, but no security scanning tools were detected.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All four workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings, but all 8 action references are unpinned and no workflow has a top-level permissions block; this is a workflow hygiene concern rather than a severe risk.