@jimp/js-png

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last three months, a meaningful maintenance warning despite the package's recent release.

Build provenancecaution

This release has no registry build attestation or trusted-publisher provenance, reducing publication transparency even though other package metadata is complete.

Release historycaution

The package has 21 releases over 751 days and one release in the last 12 months, showing a real release history but a currently sparse cadence.

Repo issue activitycaution

Recent activity is limited: 1 new issue, 0 closed issues, 2 new pull requests, and 0 merged pull requests in the last month, which does not offset the lack of commits.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.