Popup trigger and alignment primitive for React.
88%
Total Score
100
100
100
50
No repository security policy was found, which is a modest transparency gap, though active security scanning provides some compensation.
All five workflows were analyzed with no dangerous audit findings or untrusted checkout and script-injection paths. However, 5 of 10 action references are unpinned and 3 workflows use top-level write permissions, creating a moderate workflow-hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
clsx Version ^2.1.1 | — | — |
@rc-component/util Version ^1.11.1 | — | — |
@rc-component/motion Version ^1.3.3 | — | — |
@rc-component/portal Version ^2.2.1 | — | — |
@rc-component/resize-observer Version ^1.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.