@nivo/text

Release historycaution

The package has had no registry release in about 16 months, which raises maintenance and freshness concerns. Recent repository activity partly offsets the long release gap.

Repo package mentioncaution

The repository name does not match @nivo/text and its README does not mention the package. The repository is clearly structured as a larger Nivo project, so the mismatch is consistent with a monorepo but still leaves package ownership less explicit.

Repo toolingcaution

The repository uses established build tooling, but no security scanning tools were detected, leaving a modest security-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and handling.

Workflow auditcaution

The audit analyzed both workflows completely and found no dangerous sinks or high-severity findings, with job-level permissions used in one workflow. However, all 15 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.