@mapbox/point-geometry

Release historycaution

The package has only 3 releases since April 2017, with no releases in the last 12 months and a median interval of about 3.6 years. This is a real maintenance concern, although the latest release is recent enough to remain relevant.

Repo bus factorcaution

One contributor made all recent commits, giving the repository a bus factor of one. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent development activity. The recent repository push is a modest compensating sign but does not show sustained work.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security-scanning tool was detected. For this small package that is a hygiene gap rather than a severe dependency risk.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Both action references are unpinned, which weakens build reproducibility and leaves a supply-chain hygiene gap.