@react-types/radio

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, leaving publication origin less independently verifiable even though other project signals are strong.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @react-types/radio. This may be normal for a monorepo, but the package's specific ownership is less explicit.

Version stabilitycaution

Version 3.10.0 is a stable, non-prerelease major release. However, all recent releases were marked prereleases, which is a minor stability concern.

Workflow auditcaution

All 8 workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script-injection findings; job-level or read-only permissions are common. However, all 15 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain controls.