Force-directed graph layout in 1D, 2D or 3D using velocity Verlet integration.
68%
Total Score
caution
Mature, well-documented package, but no releases in the last 12 months and no commits in the last 3 months.
No build attestation or trusted-publisher identity is present, reducing publication transparency. This is a supply-chain hygiene gap, not evidence that the release is malicious.
A prepare lifecycle script runs during installation or package preparation. This adds build-time behavior to review, but the signal alone does not show harmful or unnecessary execution.
Only one registry publishing maintainer is listed. That is a meaningful continuity and bus-factor concern because publishing depends on a single account.
The repository is owned by an individual user rather than an organization, so the single registry maintainer is not offset by visible organizational backing.
The package is mature, with 20 releases since March 2017 and a median interval of about 84 days, but it has had no releases in the last 12 months.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
d3-timer Version 1 - 3 | — | — |
d3-octree Version 1 | — | — |
d3-dispatch Version 1 - 3 | — | — |
d3-quadtree Version 1 - 3 | — | — |
d3-binarytree Version 1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.