Package Health

d3-force-3d

Force-directed graph layout in 1D, 2D or 3D using velocity Verlet integration.

Latest 3.0.6NPMNPM

68%

Total Score

caution

Mature, well-documented package, but no releases in the last 12 months and no commits in the last 3 months.

Health Score Breakdown

Build provenancecaution

No build attestation or trusted-publisher identity is present, reducing publication transparency. This is a supply-chain hygiene gap, not evidence that the release is malicious.

Lifecycle scriptscaution

A prepare lifecycle script runs during installation or package preparation. This adds build-time behavior to review, but the signal alone does not show harmful or unnecessary execution.

Maintainerscaution

Only one registry publishing maintainer is listed. That is a meaningful continuity and bus-factor concern because publishing depends on a single account.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single registry maintainer is not offset by visible organizational backing.

Release historycaution

The package is mature, with 20 releases since March 2017 and a median interval of about 84 days, but it has had no releases in the last 12 months.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
d3-timer
Version 1 - 3
—
—
d3-octree
Version 1
—
—
d3-dispatch
Version 1 - 3
—
—
d3-quadtree
Version 1 - 3
—
—
d3-binarytree
Version 1
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
9 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform