@img/sharp-libvips-linux-x64
Prebuilt libvips and dependencies for use with sharp on Linux (glibc) x64
78%
Total Score
healthy
Healthy release with frequent maintenance and npm provenance; licensing mismatch and weak package-to-repository linkage merit verification.
Health Score Breakdown
The manifest declares LGPL-3.0-or-later, while the repository license file was detected as Apache-2.0, creating an unresolved license mismatch despite a repository license being present.
Only one registry publishing account is listed, which is a concentration risk, but repository activity shows a second active contributor and the package has current releases.
The repository name does not match the package and its README does not mention the package, creating some uncertainty about the package-to-source relationship despite the repository's plausible libvips purpose.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; active maintenance and Dependabot partly compensate.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 16 days ago
- Created
- 3 years ago
- Unpacked Size
- 17.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.