@radix-ui/react-toolbar

Maintainerscaution

Two publishing accounts use the workos.com domain, while hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain accounts; those accounts create account-hygiene caution but do not outweigh the organization backing.

Repo package mentioncaution

The linked repository name differs from the package name and does not mention the package in its README. This is plausible for a monorepo subpackage, but the absence of a package mention leaves some ownership ambiguity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations less transparent despite the otherwise active project.

Workflow auditcaution

All 4 workflows were analyzed with no injection, untrusted-checkout, or audit findings, but all 8 action references are unpinned. Missing top-level permissions is not a problem here because one workflow uses job-level permissions and none grants top-level write access.