@jimp/plugin-invert

Build provenancecaution

No build attestation or trusted-publishing provenance was provided, limiting verification of how the artifact was produced, though this alone does not show the release is unsafe.

Release historycaution

The package has a long history with 216 releases, but no registry release occurred in the last 12 months and the latest release is roughly 2 years 7 months old, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign of limited current maintenance despite the recent push timestamp.

Repo issue activitycaution

Issue and pull request throughput is low: one new issue, no closed issues, two new pull requests, and no merged pull requests in the last month.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @jimp/plugin-invert, so the package-to-repository relationship is less transparent; the monorepo structure partly explains the name mismatch.