react-resizable-panels

Build provenancecaution

No build attestation or trusted-publisher provenance was provided, leaving the relationship between source and published artifact less transparent.

Repo bus factorcaution

The leading contributor made 84% of recent commits, creating concentration risk despite 9 contributors being active.

Repo toolingcaution

The repository uses TypeScript, Vite, Vitest, Rollup, SWC, and related build tooling, but no security-scanning tools were detected.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

All 6 workflows were analyzed with no untrusted checkouts, injection sinks, or high-severity findings. However, all 22 action references are unpinned, which weakens workflow reproducibility and supply-chain hygiene.