@radix-ui/react-focus-scope

Maintainerscaution

The package has four publish-access accounts, with two on the organization domain. hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain publishing accounts, creating account-hygiene caution, though organization backing compensates for limited registry access coverage.

Repo package mentioncaution

The linked repository is an organization monorepo, so its name not matching the package is ordinary. However, the package name is not mentioned in the repository README, leaving some uncertainty about package-to-repository documentation.

Repo toolingcaution

The repository uses Vitest, Vite, TypeScript, and npm scripts for build and test work. No security-scanning tooling was detected, leaving a modest hygiene gap.

Security policycaution

No repository security policy was detected. This reduces transparency for reporting vulnerabilities, although it does not by itself indicate abandonment.

Workflow auditcaution

All four workflows were analyzed successfully with no untrusted checkouts, script injections, or audit findings. However, all 11 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.