@jimp/jpeg

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable. This is a transparency gap, but not severe enough to outweigh the repository and release evidence.

Release historycaution

The package has 220 releases since August 2018, but none in the last 12 months and the latest release was in February 2024. This materially raises maintenance and abandonment concerns despite the long release history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the repository was pushed in April 2026, the measured commit inactivity still weakens confidence in prompt maintenance.

Repo issue activitycaution

The repository saw one new issue and two new pull requests in the last month, but closed no issues or pull requests. This shows limited recent activity rather than strong maintenance momentum.

Repo package mentioncaution

The repository name does not match @jimp/jpeg and its README does not mention the package. While a name mismatch is normal for a monorepo, the lack of a README mention leaves package-to-repository linkage less transparent.