@jimp/js-bmp

Build provenancecaution

No build attestation or trusted-publisher provenance is provided, leaving publication origin less verifiable than it could be.

Release historycaution

The package is 750 days old with 21 releases, but only one release in the last 12 months, indicating a notably slower release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning, although a release was published during the broader period.

Repo issue activitycaution

Only one issue was opened and no issues were closed in the last month; two pull requests were opened but none were merged, suggesting limited recent maintenance.

Repo package mentioncaution

The repository name differs from the package and its README does not mention @jimp/js-bmp. This is plausible for a monorepo subpackage, but the missing README reference weakens package-to-repository transparency.