@jimp/plugin-gaussian

Release historycaution

The package has a long history and 216 releases, but its latest release was in February 2024 with no releases in the last 12 months, which indicates reduced maintenance for this version line.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently limited development activity.

Repo issue activitycaution

Recent issue and pull-request activity is sparse: one new issue, no closed issues, two new pull requests, and no merged pull requests in the last month, providing little evidence of active issue resolution.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package. A monorepo explains the name mismatch, but the missing README reference still weakens package-to-source transparency.

Workflow auditcaution

Both analyzed workflows use top-level write permissions and all eight action references are unpinned. There are no detected untrusted checkouts, script injections, or high-severity findings, so this is a hygiene concern rather than a severe risk.