@jimp/plugin-hash

Build provenancecaution

No build attestation or trusted-publisher provenance is recorded, leaving publication origin less transparent despite the repository and release evidence.

Dependency profilecaution

Ten runtime dependencies, including several Jimp packages, make this a moderately coupled plugin; the dependency set is coherent with its plugin role but adds maintenance surface.

Release historycaution

The package has 21 releases over roughly two years, but only one release in the last 12 months; the recent release prevents this from indicating abandonment, but cadence is thin.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers over the last three months, a meaningful maintenance warning that is partly offset by the recent release.

Repo issue activitycaution

Only one issue was opened and no issues were closed in the last month, while 26 pull requests remain open; this suggests limited recent issue throughput but is not conclusive abandonment evidence.