@zag-js/slider

Repo package mentioncaution

The repository name does not match the package name and its README does not mention @zag-js/slider, which creates some mapping uncertainty. The organization-backed monorepo context and the package's consistent source tree provide partial compensation.

Repo toolingcaution

The repository uses established build tools including TypeScript, Vite, tsup, SWC, npm scripts, and esbuild. No security scanning tools were detected, leaving a modest tooling gap.

Security policycaution

The repository has no published security policy. This is a transparency and vulnerability-reporting gap, though the strong maintenance evidence limits its effect on adoption confidence.

Workflow auditcaution

All three workflows were analyzed with no audit findings or untrusted checkouts, but 8 of 9 action references are unpinned and one workflow grants top-level write permissions. With no untrusted trigger or sink, this is workflow hygiene rather than a severe risk.