@zag-js/tooltip
Core logic for the tooltip widget implemented as a state machine
78%
Total Score
healthy
Active releases and repository work support the package, but most workflow actions are unpinned and the repository does not clearly name this package.
Health Score Breakdown
The repository name does not match the package and its README does not mention @zag-js/tooltip, so the package-to-repository relationship is less explicit despite the organization backing.
The project uses established TypeScript and build tooling, but no security scanning tools were detected, leaving a modest transparency gap.
No repository security policy was found, reducing the project's documented vulnerability-reporting transparency.
All three workflows were analyzed with no dangerous audit findings or untrusted checkout paths, but 8 of 9 action references are unpinned and one workflow grants top-level write access.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @zag-js/core Version 1.46.0 | — | — |
@zag-js/types Version 1.46.0 | — | — |
@zag-js/utils Version 1.46.0 | — | — |
@zag-js/popper Version 1.46.0 | — | — |
@zag-js/anatomy Version 1.46.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 4 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.