@jimp/plugins

Dependency profilecaution

The package declares 22 runtime dependencies, mostly Jimp plugins, creating a broad coordinated dependency surface that can increase upgrade and maintenance risk.

Release historycaution

The package has 222 releases since 2018, but its latest release was over two years ago and there were no releases in the last 12 months, indicating a meaningful maintenance slowdown.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which weakens evidence of ongoing maintenance despite the repository not being archived.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

Both analyzed workflows grant top-level write permissions and all 8 action references are unpinned. There are no untrusted checkouts, script injections, or reported high-severity findings, so this is a hygiene concern rather than a severe risk.