@radix-ui/react-menu

Maintainerscaution

The package has organization-domain publishers, but hadihallak (gmail.com) and chancestrickland (chance.dev) use outside domains, creating some account-hygiene risk despite WorkOS backing.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @radix-ui/react-menu. The mismatch may be normal for a monorepo, but the missing README reference leaves package ownership less explicit.

Repo toolingcaution

The project uses TypeScript, Vite, Vitest, and npm scripts for its build and tests. No security-scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.

Workflow auditcaution

All 4 workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, weakening build reproducibility and supply-chain control.