visx text
67%
Total Score
caution
Usable with caveats: maintenance has slowed to one contributor and one commit in three months.
One contributor made all commits in the last three months. Organization backing partly offsets this concentration, but the observed activity still leaves limited recent individual redundancy.
Only one commit was recorded in the last three months, indicating that source maintenance has recently slowed despite the package's strong release history.
Only one issue was opened and no issues or pull requests were closed in the last month, while 35 pull requests remain open; this suggests limited recent repository throughput.
The repository name does not match this package and its README does not mention it. That can be normal for a monorepo sub-package, but the missing explicit mention weakens package-to-source transparency.
Both workflows were analyzed successfully with no detected findings or untrusted checkout paths, and one scopes permissions at job level. However, all six action references are unpinned, leaving avoidable reproducibility and action-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
classnames Version ^2.3.1 | — | — |
reduce-css-calc Version ^1.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.