@jimp/js-gif

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable even though the package has a documented build structure.

Release historycaution

The package has 21 releases over 747 days and a release within the assessed period, but only one release in the last 12 months suggests a slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a concrete maintenance concern for a dependency.

Repo issue activitycaution

Only one new issue was recorded in the last month, with no issues closed and no pull requests merged, indicating limited recent project throughput.

Repo package mentioncaution

The repository name does not match this package and its README does not mention it. The package is likely a monorepo subpackage, but the missing explicit mention still weakens package-to-repository transparency.