Prebuilt libvips and dependencies for use with sharp on Linux (glibc) RISC-V 64-bit
82%
Total Score
healthy
Healthy overall, supported by frequent releases and active maintenance despite licensing and package-linkage concerns.
The manifest declares LGPL-3.0-or-later, while the repository license file is detected as Apache-2.0, so the licensing information is inconsistent even though both sources provide license evidence.
The repository name does not match this package and its README does not mention the package, so the package-to-repository relationship is less transparent; this may also reflect a platform subpackage layout.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Version 1.3.4 is a stable, non-prerelease major version, although 70% of recent releases were prereleases, which adds some release-channel volatility.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.