@jimp/plugin-dither

Release historycaution

The package has existed for about 8 years with 238 releases, but only 1 release in the last 12 months, indicating a recent slowdown after substantial historical activity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance warning despite the recent published release.

Repo issue activitycaution

Recent issue and pull-request activity is limited: 1 new issue, no closed issues, 2 new pull requests, and no merged pull requests in the last month.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response guidance undocumented.

Workflow auditcaution

Both workflows grant top-level write permissions and all 8 analyzed action references are unpinned. No untrusted checkout, script injection, or high-severity finding was reported, so this is a hygiene caution rather than a severe risk.