@visx/vendor

Repo bus factorcaution

All one recent commit came from a single contributor. The organization-owned repository provides handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit was recorded in the last three months, by one active maintainer. The recent release and organization backing partly compensate, but this is still a meaningful sign of slowing maintenance.

Repo issue activitycaution

In the last month, one issue was opened and no issues or pull requests were closed or merged. This supports the broader concern about limited recent maintenance activity.

Repo package mentioncaution

The repository name does not match @visx/vendor and its README does not mention the package, creating uncertainty about the package-to-repository link. The package's README describes its role, but the repository-level mismatch remains a caution.

Repo toolingcaution

The repository uses TypeScript, Vitest, Babel, and npm scripts, but no security scanning tools were detected. The development tooling is solid; the missing scanning is a modest transparency gap.