geojson-vt

Repo bus factorcaution

One contributor made 90% of the last three months' commits, which is concentrated, but a second contributor remains active and the repository is organization-owned.

Repo toolingcaution

The project uses TypeScript, Rollup, and npm scripts, but no security-scanning tools were detected; this is a modest transparency gap rather than a severe risk.

Workflow auditcaution

The workflow audit completed cleanly with read-only permissions and no dangerous findings, but both of its two action references are unpinned, leaving dependency versions less reproducible.