@react-types/slider

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, leaving publication origin less independently verifiable despite the package's otherwise strong project backing.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which weakens package-to-repository traceability; the mismatch is still plausible for a monorepo subpackage.

Version stabilitycaution

Version 3.9.0 is a stable major release and not a prerelease, although the recent prerelease share is 100%, which adds some release-channel uncertainty.

Workflow auditcaution

All 8 workflows were analyzed with no reported audit findings, no untrusted checkouts, no script injection, and read-only or job-scoped permissions in the observed workflows. However, all 15 action references are unpinned, creating a workflow supply-chain hygiene gap.