@visx/point

Repo bus factorcaution

All recent commit activity came from one contributor, creating concentration risk. Organization backing partly compensates because maintenance can potentially be handed off.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating very limited recent source activity. This is a meaningful maintenance concern even though the package released 13 times in the prior year.

Repo issue activitycaution

The repository had one new issue and two new pull requests in the last month but merged none, which is weak evidence of current responsiveness. The short observation window limits how strongly this should weigh.

Repo package mentioncaution

The repository name does not match @visx/point and its README does not mention the package. Although name mismatches are normal for monorepos, the absence of both signals creates uncertainty about package-to-repository alignment.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings, and one scopes permissions at job level. However, all six action references are unpinned, weakening workflow reproducibility and supply-chain hygiene.