@jimp/plugin-mask

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence was provided, leaving the release origin less independently verifiable.

Release historycaution

The package has existed for about 8 years with 242 releases, but only one release in the last 12 months, indicating slower recent maintenance despite its long history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, a meaningful maintenance concern even though the release is recent.

Repo package mentioncaution

The repository name differs from the package and its README does not mention @jimp/plugin-mask. The mismatch is explainable by the monorepo layout, but the missing README reference still reduces package-to-repository traceability.

Repo toolingcaution

The repository uses TypeScript, Turbo, and npm build tooling, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.