Prebuilt sharp for use with Linux (glibc) x64
88%
Total Score
healthy
Healthy release with rapid maintenance, signed npm provenance, and only modest contributor-concentration and package-linkage concerns.
The package is linked to the individual-owned lovell/sharp repository rather than an organization-owned repository. This does not indicate abandonment, but it means contributor concentration deserves the caution noted separately.
Four contributors were active recently, but the top contributor made 83% of commits. The active secondary contributors partly offset, but do not eliminate, concentration risk.
The linked repository name does not match this platform package and its README does not mention the package. A name mismatch can be normal for a monorepo subpackage, but the lack of a README mention warrants a linkage caution.
Version 0.35.5 is not a prerelease, but 70% of recent releases are prereleases and the package has not reached a stable major version. That creates some version-churn risk despite the current release being a normal release.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.