@react-aria/ssr

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable despite the package's otherwise strong maintenance evidence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @react-aria/ssr, creating uncertainty about the package-to-repository link; the mismatch may reflect a monorepo, but the missing mention remains a caution.

Workflow auditcaution

All eight workflows were analyzed with no audit findings or untrusted checkouts, and permissions are read-only or job-scoped where declared. However, all 15 action references are unpinned, a supply-chain hygiene gap.