@jimp/plugin-contain

Build provenancecaution

No build attestation or trusted-publisher provenance is recorded, leaving publication origin less transparent than it could be.

Release historycaution

The package has existed for about eight years with 242 releases, showing substantial maturity, although only one release occurred in the last 12 months.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign of currently quiet maintenance despite the recent release.

Repo issue activitycaution

The repository still receives issues and pull requests, but no pull requests were merged in the last month, indicating limited recent throughput.

Repo toolingcaution

The repository uses TypeScript, Turbo, and npm scripts, but no security-scanning tooling was detected, leaving a modest security-process gap.