@nivo/annotations

Release historycaution

The package has had no release for about 16 months, which is a maintenance concern, although the linked repository still shows recent activity and the assessed release includes release notes.

Repo toolingcaution

The project uses TypeScript, Babel, Rollup, Make, and npm scripts, showing an established build process, but no security-scanning tooling was detected.

Security policycaution

The repository has no security policy, reducing transparency around vulnerability reporting, though this is a hygiene gap rather than evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or dangerous triggers, and one scopes permissions at the job level. However, all 15 action references are unpinned, leaving builds more exposed to action changes.