@nivo/axes

Build provenancecaution

No build attestation or trusted-publishing provenance is reported, leaving the artifact's build origin less transparent.

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no provided evidence of institutional handoff capacity. Recent activity and four contributors partly offset that limitation.

Release historycaution

The package has 68 releases since December 2017, but none in the last 12 months. Repository activity shows the project is not abandoned, so this is a moderate maintenance concern rather than a severe risk.

Repo toolingcaution

The project uses TypeScript, Babel, Rollup, Make, and npm scripts, indicating an established build process, but no security scanning tools were detected.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.