@radix-ui/react-toolbar

Maintainerscaution

The package has a clear workos.com publishing domain, but hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain publishing accounts, creating account-hygiene risk.

Repo issue activitycaution

Recent issue and pull-request activity shows the project is being worked on, although only 3 pull requests were merged in the last month against 14 opened.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, so the linkage is less transparent even though the organization ownership is consistent.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All four workflows were analyzed without dangerous sinks or audit findings, but all 8 action references are unpinned, weakening build reproducibility.