@radix-ui/react-label

Maintainerscaution

The package is organization-backed, and two publishing accounts use the workos.com domain. The consumer-linked account hadihallak (gmail.com) and outside-domain account chancestrickland (chance.dev) create account-hygiene risk, but they do not by themselves show limited maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. The organization-backed monorepo context makes a subpackage layout plausible, but the missing README reference leaves some package-to-repository ambiguity.

Repo toolingcaution

The repository uses TypeScript, Vite, Vitest, and npm scripts, with a defined build toolchain. No security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was found. This reduces vulnerability-reporting transparency, although active repository maintenance provides some compensation.

Workflow auditcaution

All four workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.