@radix-ui/react-slot

Maintainerscaution

The organization has two workos.com publishing accounts, but hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain accounts that create account-hygiene caution.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating some uncertainty about the package-to-repository link; the organization-backed monorepo context partly compensates.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations less explicit despite otherwise active project maintenance.

Workflow auditcaution

All four workflows were analyzed without untrusted checkouts or injection findings, but all 8 action references are unpinned; this is a supply-chain hygiene gap, not a severe risk on its own.