@visx/group

Repo bus factorcaution

All recent commit activity comes from one contributor, giving the repository a concentrated short-term bus factor. Organization backing provides some ability to hand off maintenance, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, from one active maintainer. This is a meaningful maintenance slowdown despite the strong release history.

Repo issue activitycaution

There is still some recent issue and pull-request intake, but no issues or pull requests were closed in the last month and no pull requests were merged, suggesting weak current throughput.

Repo toolingcaution

The repository uses TypeScript, Vitest, Babel, and npm scripts, but no security scanning tools were detected. The build tooling is solid while security-monitoring coverage is a modest gap.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings, and one scopes permissions at job level. However, all six action references are unpinned, which weakens build reproducibility.