@radix-ui/react-navigation-menu

Maintainerscaution

The organization-backed package has two workos.com publisher accounts, but hadihallak uses gmail.com and chancestrickland uses chance.dev; those outside accounts create account-hygiene risk despite the organizational backing.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @radix-ui/react-navigation-menu, so the package-to-repository relationship is not directly established by this signal.

Repo toolingcaution

The repository uses established build and test tooling including Vitest, Vite, TypeScript, and npm scripts, but no security-scanning tool was detected.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less explicit for a widely used library.

Workflow auditcaution

All four workflows were analyzed with no detected injection or high-severity findings, but all 8 action references are unpinned, reducing build reproducibility and action-integrity protection.