@react-stately/datepicker

Repo package mentioncaution

The repository name differs from the package name, which is ordinary for a monorepo, but its README does not mention this package. That weakens package-to-source traceability, although the linked Adobe monorepo and matching package context partly compensate.

Workflow auditcaution

All 8 workflows were analyzed without failed files or detected injection findings, and permissions are read-only or job-scoped where reported. However, all 15 action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.