@radix-ui/react-use-size

Maintainerscaution

The primary publishing domain is workos.com, but hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain publishing accounts; this is an account-hygiene caution, partly offset by the organization domain.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so ownership of this subpackage is less transparent even though it sits in an organization repository.

Repo toolingcaution

The project uses TypeScript, Vite, Vitest, and npm scripts, but no security scanning tools were detected; this is a modest transparency gap rather than a severe dependency risk.

Security policycaution

No repository security policy was found, leaving disclosure and response expectations undocumented.

Workflow auditcaution

All four workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.