@radix-ui/react-popover

Maintainerscaution

The package has organization-domain publishers, but hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain publishing accounts, creating account-hygiene risk despite WorkOS backing.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @radix-ui/react-popover; although a monorepo name mismatch is normal, the lack of an explicit package reference warrants caution about source linkage.

Repo toolingcaution

The repository uses Vitest, Vite, TypeScript, and npm scripts, but no security-scanning tools were detected, leaving a modest verification gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and maintainer response procedures.

Version stabilitycaution

Version 1.3.1 is a stable, non-prerelease release, although 70% of recent releases were prereleases, adding some release-process uncertainty.