MediaPipe Vision Tasks. See the privacy notice at https://goo.gle/mediapipe-privacy.
70%
Total Score
caution
Strong release activity is offset by limited publishing transparency and one personal publish account.
No build attestation, trusted publisher identity, or staged publishing is present, so consumers have less verifiable evidence about how the artifact was produced.
Seven of eight publish accounts use google.com, indicating a clear organizational center. dancingplatypus uses a gmail.com address, creating a minor account-continuity hygiene concern rather than evidence of limited maintenance capacity.
Version 1.1.0 is a stable major release and is not a prerelease, although the recent prerelease share of 95% makes the release stream somewhat noisy.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.