d3-scale

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable. This is a transparency weakness, not evidence that the release is unsafe.

Release historycaution

The package has 60 releases and historically released about every 16 days, but its latest registry release was over four years ago with no releases in the last 12 months. Recent repository activity partly offsets the age of this published version.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The recent push and ongoing issue and pull-request activity provide some compensation, but current development momentum remains uncertain.

Repo toolingcaution

The repository uses Rollup for builds, but no security scanning tools were detected. Build tooling is present; the missing scanning is a modest hygiene gap.

Security policycaution

The repository has no security policy. This limits disclosure guidance for users, although it does not by itself show poor maintenance.