echarts-for-react

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to offset the thin maintainer base.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, a meaningful maintenance warning partly offset by five registry releases in the last year and a January push.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, suggesting limited current project interaction; the small open pull-request count is not itself severe.

Security policycaution

No repository security policy was found, leaving vulnerability reporting expectations and response guidance undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 3 action references are unpinned, reducing build reproducibility and update control.