dagre-d3-es

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the artifact's build origin less independently verifiable.

Maintainerscaution

Only one registry account has publish access. That is a genuine continuity and bus-factor concern, although recent releases and repository activity provide some compensation.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. This recent inactivity weakens confidence in ongoing maintenance, despite the release and repository push occurring recently.

Repo toolingcaution

The repository uses TypeScript, Vite, npm scripts, and esbuild, but has no reported security scanning tools. The build setup is concrete, while security-monitoring coverage is limited.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.