a vulnerability is introduced in @streetscape.gl/monochrome

[ayaka-kms]

Hi, @Pessimistress, a vulnerability is introduced in @streetscape.gl/monochrome via:
● @streetscape.gl/[email protected] ➔ [email protected] ➔ [email protected]

react-vis is a legacy package. It has not been maintained for about 2 years, and is not likely to be updated.
Is it possible to migrate react-vis to other package to remediate this vulnerability?

I noticed several migration records for react-vis in other js repos, such as

1. in boba-watch, version 2.0.0, remove react-vis via commit
2. in network-explorer, version 0.1.0, remove react-vis via commit

Are there any efforts planned that would remediate this vulnerability or migrate react-vis?

Thanks
; )