@visx/bounds

Repo bus factorcaution

One contributor made all commits in the last three months, concentrating recent repository activity; Airbnb organization backing provides some handoff capacity but does not remove the current thin activity base.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating a sharp recent slowdown despite the package's strong release history.

Repo issue activitycaution

There is still some recent activity, with one new issue and two new pull requests in the last month, although none of the pull requests were merged; this is a modest maintenance concern.

Repo toolingcaution

The repository uses TypeScript, Vitest, Babel, and npm scripts, but no security scanning tools were detected; the missing scanning is a hygiene gap rather than evidence of unsafe code.

Workflow auditcaution

Both workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, injection findings, or write-wide tokens. However, all six action references are unpinned, which leaves avoidable workflow supply-chain exposure.