@img/sharp-libvips-darwin-x64

Licensecaution

The package declares LGPL-3.0-or-later, while the repository license file was detected as Apache-2.0. This mismatch needs clarification even though both the package and repository provide licensing information.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-source relationship is not directly established. This is more concerning than a name mismatch alone because both checks are negative.

Security policycaution

No repository security policy was found. This is a transparency gap, but the active maintenance and Dependabot coverage partly compensate for it.