@visx/shape

Repo bus factorcaution

One contributor made about 82% of the 11 recent commits, creating concentration risk, though two other contributors remained active and the repository is organization-owned.

Repo issue activitycaution

Recent issue and pull-request throughput is low, with one new issue, two new pull requests, and no closures or merges in the last month; the active commit and release history partly compensate.

Repo toolingcaution

The project uses TypeScript, Vitest, Babel, and npm scripts, but no security scanning tools were detected; this is a modest transparency gap rather than evidence of unsafe code.

Workflow auditcaution

Both workflows were analyzed without findings or unsafe-trigger sinks, and one scopes permissions at job level. However, all six action references are unpinned, weakening build reproducibility and supply-chain hygiene.