@jimp/plugin-threshold

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This leaves release origin less transparent, although it is not by itself evidence that the release is unsafe.

Release historycaution

The package is mature, with 235 releases over roughly 8 years, but only one release in the last 12 months indicates a slower current cadence. The recent release provides some evidence of ongoing publishing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. A release was published recently, which partly compensates, but the missing implementation activity remains a maintenance concern.

Repo issue activitycaution

The repository had one new issue and two new pull requests in the last month, but no issues or pull requests were closed or merged. This suggests limited recent maintenance throughput.

Repo package mentioncaution

The repository name differs from the package name, which is normal for a monorepo, but the README does not mention this package. That weakens confirmation that the linked repository specifically represents this release.