@jimp/plugin-rotate

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the registry artifact's build origin less transparent despite the linked source repository.

Release historycaution

The package has existed for 2,949 days with 242 releases, but only one release in the last 12 months indicates a sharply slower current cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a concrete sign that current maintenance may have stalled.

Repo package mentioncaution

The repository name differs from the package, which is normal for a monorepo, but its README also does not mention @jimp/plugin-rotate, making package-to-repository association less transparent.

Repo toolingcaution

TypeScript, Turbo, and npm build tooling are present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.