@jimp/png

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the origin of the published artifact less independently verifiable.

Release historycaution

The latest registry release was about 2 years and 7 months before collection, with no releases in the last 12 months. Its history is substantial at 220 releases, but the current pause raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that development activity has stalled recently.

Repo issue activitycaution

Recent issue activity is low: one new issue and no closed issues in the last month, while two pull requests were opened and none merged. This provides limited evidence of active maintenance.

Repo toolingcaution

The project uses TypeScript, Turbo, and npm scripts, indicating an established build setup, but no security scanning tools were detected.