d3-random

Release historycaution

The package has 25 releases but none in the last 12 months, and its latest release was about 5 years ago. This is a meaningful maintenance concern, though the mature release history partly offsets abandonment risk.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months, reinforcing the concern raised by the lack of recent registry releases.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with five open pull requests remaining; this suggests limited current project activity.

Repo toolingcaution

The repository uses Rollup for builds, but no security-scanning tooling was detected. For a small stable library this is a modest transparency gap rather than a severe risk.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both referenced actions are unpinned, which is a build-reproducibility and dependency-hygiene concern.