npmpackage.info

Gathering detailed insights and metrics for @radix-ui/react-collection

Gathering detailed insights and metrics for @radix-ui/react-collection

@radix-ui/react-collection - 1.1.7 | npmpackage.info

@radix-ui/react-collection

Radix Primitives is an open-source UI component library for building high-quality, accessible design systems and web apps. Maintained by @workos.

1.1.7

17,478

MIT

TypeScript

129.15 kB

Installations

npm install @radix-ui/react-collection

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, ESM

Node Version

22.15.0

NPM Version

10.9.2

Score

93.7

Supply Chain

62.9

Quality

93.5

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

94

Total

1,192

Closed

196

Merged

902

Issues

Open

561

Total

1,668

Closed

1,107

Releases

Unable to fetch releases

Languages

4

TypeScript

CSS

JavaScript

HTML

TypeScript (95.54%)

CSS (3.52%)

JavaScript (0.94%)

HTML (0.01%)

Developer

Download Statistics

Total Downloads

0

Last Day

0

Last Week

0

Last Month

0

Last Year

0

GitHub Statistics

MIT License

17,478 Stars

1,629 Commits

981 Forks

52 Watchers

20 Branches

88 Contributors

Updated on Jul 13, 2025

Maintainers

6

View All 88 Contributors

Package Meta Information

Latest Version

1.1.7

Package Id

@radix-ui/react-collection@1.1.7

Unpacked Size

129.15 kB

Size

24.40 kB

File Count

9

NPM Version

10.9.2

Node Version

22.15.0

Published on

May 20, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

0%

NaN

Compared to previous day

Last Week

0%

NaN

Compared to previous week

Last Month

0%

NaN

Compared to previous month

Last Year

0%

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

4

@radix-ui/react-compose-refs @radix-ui/react-context @radix-ui/react-primitive @radix-ui/react-slot

Peer Dependencies

4

@types/react @types/react-dom react react-dom

Dev Dependencies

9

@types/react @types/react-dom eslint react react-dom typescript @repo/builder @repo/typescript-config @repo/eslint-config

`react-collection`

This is an internal utility, not intended for public usage.

Empty State

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

5

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/build.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/chromatic.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/chromatic.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/chromatic.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/chromatic.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/publish-snapshot.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-stable.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/publish-stable.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-stable.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/publish-stable.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-stable.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/publish-stable.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-stable.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/radix-ui/primitives/publish-stable.yml/main?enable=pin
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 6 third-party GitHubAction dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

4.5

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.