@img/sharp-libvips-linuxmusl-arm64
The README, release notes, and npm provenance improve transparency, while the license mismatch and repository naming gap warrant checking. No security policy is published, but active contributors and recent maintenance reduce abandonment concerns.
78%
Total Score
100
83
83
100
Health Score Breakdown
The manifest declares LGPL-3.0-or-later, while the linked repository license file was detected as Apache-2.0; this mismatch should be clarified even though the repository is licensed.
The repository name does not match the package and its README does not mention the package, creating uncertainty about the exact package-to-repository relationship despite the repository containing platform package definitions.
The repository has no published security policy, leaving reporting and response expectations unclear. Active maintenance and Dependabot provide some compensating security practice.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 2 years ago
- Unpacked Size
- 17.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.