@react-aria/autocomplete

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which weakens package-to-source transparency; the large repository context is consistent with a monorepo, partly mitigating that concern.

Version stabilitycaution

This release is a prerelease and all recent releases are prereleases, which adds some adoption risk because the API may still change.

Workflow auditcaution

All eight workflows were analyzed successfully with no audit findings, no untrusted checkout or script-injection paths, and scoped read-only or job-level permissions. However, all 15 analyzed action references are unpinned, leaving a workflow reproducibility and update-integrity gap.