@visx/curve

Repo bus factorcaution

One contributor made all commits in the last three months. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only 1 commit was recorded in the last three months, indicating very limited recent repository activity despite the recent package release history.

Repo package mentioncaution

The repository name does not match @visx/curve and its README does not mention the package, so the package-to-repository link is less directly verifiable; the monorepo context makes a name mismatch ordinary but does not remove the documentation gap.

Repo toolingcaution

The repository uses TypeScript, Vitest, Babel, and npm scripts, and has a build tool; no security scanning tool was detected, which is a minor transparency gap.

Workflow auditcaution

Both workflows were analyzed with no reported audit findings, no untrusted checkout or script injection, and no top-level write permissions. However, all 6 action references are unpinned, leaving a workflow reproducibility and action-integrity gap.