@radix-ui/react-hover-card

Maintainerscaution

Two of four publish-access accounts use the WorkOS domain, consistent with organization backing, while hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain publishing accounts and create account-hygiene concerns.

Repo bus factorcaution

One contributor made 92.98% of the 114 recent commits, creating a substantial concentration risk despite eight active contributors and organization backing.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-source relationship is less transparent; the monorepo structure makes this only a caution.

Repo toolingcaution

The project uses Vitest, Vite, TypeScript, and npm scripts, but no security-scanning tooling was detected; the missing scanner is a modest hygiene gap.

Security policycaution

No repository security policy was detected, leaving vulnerability-reporting expectations undocumented.