@radix-ui/react-use-previous

Repo bus factorcaution

One contributor made about 97% of the 119 recent commits. Organization backing provides some handoff capacity, but the observed activity is still highly concentrated.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which creates some package-to-source transparency concern. The organization-owned repository appears to be a monorepo, partly compensating for the name mismatch.

Repo toolingcaution

The repository uses TypeScript, Vite, Vitest, and npm scripts for its build and tests. No security scanning tooling was detected, leaving a modest process gap.

Security policycaution

The linked repository has no SECURITY.md or other detected security policy, reducing transparency for vulnerability reporting.

Workflow auditcaution

All four workflows were analyzed without high-confidence findings or untrusted checkouts, but all eight action references are unpinned. This is a reproducibility and action-integrity hygiene gap, not a severe risk by itself.