@visx/event

Repo bus factorcaution

All recent repository commits come from one contributor, giving the package a concentrated maintenance base. Organization backing provides some ability to hand maintenance off, so this is caution rather than danger.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. That is a meaningful maintenance slowdown despite the recent package release.

Repo package mentioncaution

The repository name does not match @visx/event and its README does not mention the package. A monorepo mismatch is ordinary, but the lack of a README mention leaves package ownership less transparent.

Workflow auditcaution

All six analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, or high-severity workflow finding, limiting this to a hygiene concern.