@radix-ui/react-visually-hidden

Maintainerscaution

Two publish accounts use the organization domain, but hadihallak (gmail.com) and chancestrickland (chance.dev) are outside-domain accounts. With clear organization backing this is an account-hygiene caution, not evidence of a thin maintenance team.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. That creates some package-to-repository mapping uncertainty, though the organization-owned repository and monorepo structure partly compensate.

Repo toolingcaution

The repository uses build and test tooling including Vitest, Vite, TypeScript, and npm scripts. No security scanning tools were detected, leaving a modest tooling gap.

Security policycaution

No repository security policy was detected. This is a transparency gap, although the active repository and other release evidence partly compensate for it.

Workflow auditcaution

All four workflows were analyzed without high- or medium-severity findings, and none use untrusted checkout or script injection. However, all 8 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.