@jimp/plugin-fisheye Apply a fisheye effect to an image
58%
Total Score
caution
Usable with caveats: recent repository activity is absent and workflows use broad, unpinned automation.
No build attestation or trusted-publisher provenance was detected. This limits publication transparency, but it does not independently indicate abandonment or unsafe maintenance.
The repository recorded zero commits and zero active maintainers over the last three months. Although the release history is substantial, this is a meaningful current maintenance warning.
There were two new pull requests and one new issue in the last month, but no pull requests were merged and no issues were closed. This shows limited recent project throughput.
The repository name does not match this sub-package and its README does not mention the package. The mismatch is consistent with a monorepo, but the absent README mention leaves some package-to-repository mapping ambiguity.
The project uses TypeScript, Turbo, and npm scripts, but no security scanning tools were detected. The build setup is structured, while security automation is a gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
zod Version ^3.23.8 | — | — |
@jimp/types Version 1.6.1 | — | — |
@jimp/utils Version 1.6.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.