d3-delaunay

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving publication provenance less independently verifiable. This is a transparency concern, but it is not evidence that the package is malicious.

Release historycaution

The package has 41 releases and a long history, but it has had no releases in the last 12 months; the latest release was over three years ago. That slows confidence in receiving fixes, although the history shows established maturity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the repository was pushed recently and the package is mature, the absence of current commit activity lowers confidence that fixes are being actively developed.

Repo toolingcaution

The repository uses Rollup for builds, but no security scanning tool was detected. Build tooling supports reproducibility, while the missing scanner is a moderate hygiene gap rather than a direct health failure.

Security policycaution

No repository security policy was found. That reduces transparency about vulnerability reporting, though it is less significant for a small, stable library than evidence of abandonment would be.