@react-types/tabs

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication provenance less transparent despite the package's strong maintenance evidence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @react-types/tabs, so package ownership is less explicit; this may be normal for a monorepo but warrants verification.

Workflow auditcaution

All eight workflows were analyzed successfully with no high-confidence findings, no untrusted checkout or script injection, and scoped read-only or job-level permissions. However, all 15 action references are unpinned, a reproducibility and workflow supply-chain hygiene gap.