@visx/tooltip

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating recent maintenance has slowed despite the strong release history.

Repo package mentioncaution

The repository name does not match this package and its README does not mention @visx/tooltip, so the package-to-repository relationship is not explicit; this is a transparency concern even though monorepo subpackages commonly have differing names.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, or audit findings, and one scopes permissions at job level. However, all six action references are unpinned, leaving avoidable workflow supply-chain uncertainty.