radix-ui

Dependency profilecaution

The package declares 55 runtime dependencies, largely as the component library's internal Radix modules; this is a sizable dependency surface but is consistent with its broad bundled component scope.

Repo toolingcaution

The repository uses Vitest, TypeScript, Vite, and npm scripts for its build; no security scanning tools were detected, leaving a modest tooling gap.

Security policycaution

No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities, although it is not evidence of abandonment.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts, injections, or auditor findings, but all eight action references are unpinned; that weakens workflow reproducibility and update control.