@jimp/utils

Build provenancecaution

The release has no build provenance attestation or trusted-publisher evidence, limiting verification of how the artifact was produced; the package otherwise has a visible repository and reproducible-looking build structure.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a concrete warning about current maintenance capacity despite the recent release.

Repo issue activitycaution

There were new issues and pull requests recently, but none were closed or merged in the measured month, suggesting limited recent follow-through.

Repo toolingcaution

The project uses TypeScript, Turbo, and npm scripts, but no repository security-scanning tools were detected, leaving a modest assurance gap.

Security policycaution

No security policy was found in the repository, reducing transparency about vulnerability reporting and response.