@radix-ui/react-tabs

Maintainerscaution

The organization has two workos.com publishing accounts, but hadihallak uses gmail.com and chancestrickland uses chance.dev; these outside accounts create account-hygiene risk, though organization backing compensates for maintenance capacity concerns.

Repo package mentioncaution

The linked monorepo name does not match the package and its README does not mention @radix-ui/react-tabs, so package-to-repository ownership is less transparent despite the matching organization.

Repo toolingcaution

The repository uses established build and test tooling, but no security-scanning tool was detected; this is a modest transparency gap rather than a severe risk.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unspecified.

Workflow auditcaution

All four workflows were analyzed without dangerous sinks or audit findings, and one scopes permissions at job level. However, all 8 action references are unpinned, creating a workflow hygiene and reproducibility gap.