82%
Total Score
healthy
Active releases and organization backing outweigh concentrated recent contribution and workflow pinning gaps.
The organization-backed package has a clear workos.com publishing domain, but hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain publishing accounts that create account-hygiene risk.
Recent activity is highly concentrated: one contributor made 98.9% of commits and only two contributors were active in 3 months. Organization backing partly compensates for this concentration.
The repository name does not match the package and its README does not mention @radix-ui/react-presence, so package ownership is less transparent even though the repository is an organization-owned monorepo.
The project uses established build tools including Vitest, Vite, npm scripts, and TypeScript, but no security scanning tools were detected.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@radix-ui/react-use-layout-effect Version 1.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.