@nivo/scales

Release historycaution

The package has 62 releases over about 9 years, but none in the last 12 months; this is a meaningful delivery-cadence concern despite the repository remaining active.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @nivo/scales, which creates some package-to-source traceability uncertainty; the repository file tree nevertheless contains the broader Nivo project context.

Repo toolingcaution

The project uses TypeScript, Babel, Rollup, Make, and npm scripts, but no security-scanning tooling was detected; the build setup is credible though security coverage is limited.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

Both workflows were fully analyzed with no reported findings or untrusted checkout or injection sinks, and one scopes permissions at job level. However, all 15 action references are unpinned, weakening build reproducibility and update safety.