d3-drag

Build provenancecaution

No build attestation, trusted publisher, or staged-publishing evidence is available, leaving the artifact's build origin less transparent.

Release historycaution

The package has 28 releases since 2016, but its latest release was in June 2021 and there were no releases in the following five years, indicating prolonged release inactivity.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the three months measured, reinforcing the concern raised by the long release gap.

Repo toolingcaution

The repository uses Rollup for builds, but no security scanning tools were detected, leaving a modest security-hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a dependency.