@radix-ui/react-one-time-password-field

Repo bus factorcaution

Recent activity is highly concentrated: one contributor made 93 of 94 commits, leaving limited demonstrated continuity despite organization ownership.

Repo toolingcaution

The project uses established TypeScript, Vite, Vitest, and npm tooling, but no security scanning tools were detected.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear.

Version stabilitycaution

Version 0.1.17 is not a prerelease, but the package remains below 1.0.0 and 70% of recent versions are prereleases, so API stability is less established.

Workflow auditcaution

All four workflows were analyzed without dangerous sinks or high-severity findings, and one scopes permissions at job level. However, all 8 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.