Package Health

@nivo/legends

legend components for nivo dataviz library

Latest 0.99.0NPMNPM

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Project backingcaution

The package belongs to the @nivo namespace, but the repository owner is an individual account rather than an organization. This does not show organizational handoff capacity, though recent multi-contributor activity provides some support.

Release historycaution

The package has 86 releases over more than 8 years, but none in the last 12 months. Recent repository activity partly offsets the registry pause, but the release gap raises maintenance concern.

Repo issue activitycaution

The repository has 35 open issues and 16 open pull requests, with two new pull requests in the last month but no merged pull requests. This suggests some ongoing attention, though recent issue resolution is limited.

Repo toolingcaution

The project uses established TypeScript, Babel, Rollup, Make, and npm tooling. No security-scanning tool was detected, leaving a modest process gap.

Security policycaution

The repository has no published security policy, so vulnerability reporting and response expectations are unclear. Other project transparency signals help, but do not replace this documentation.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
d3-scale
Version ^4.0.2
—
—
@nivo/core
Version 0.99.0
—
—
@nivo/text
Version 0.99.0
—
—
@nivo/colors
Version 0.99.0
—
—
@nivo/theming
Version 0.99.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
8 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform