@radix-ui/react-menubar

Maintainerscaution

Two publish-access accounts use the company domain, while hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain accounts; these are account-hygiene cautions, not evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @radix-ui/react-menubar, so the package-to-repository relationship is less transparent despite the shared Radix organization.

Repo toolingcaution

The repository uses TypeScript, Vite, Vitest, and npm scripts, showing a structured build and test setup, but no security scanning tools were detected.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All four workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, which creates a supply-chain hygiene gap.