@react-aria/checkbox

Dangerous workflowscaution

One workflow uses pull_request_target, which warrants review because that trigger can elevate workflow permissions, but there are no untrusted checkouts or detected script-injection patterns across the eight analyzed workflows.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @react-aria/checkbox. This is consistent with a monorepo subpackage, but the lack of an explicit package reference leaves some uncertainty that the linked repository is the exact source.