Canvas for Node.js with skia backend
78%
Total Score
healthy
Active releases and repository work support this package, but all 96 Actions references are unpinned.
One contributor made about 73% of recent commits, but two other contributors remained active, so concentration is a moderate rather than severe concern.
The repository name does not match this platform package and its README does not mention it, leaving some uncertainty about the package-to-repository mapping; this may reflect a monorepo subpackage.
All 96 analyzed action references are unpinned, and two workflows grant top-level write permissions. The audit found only low-confidence cache warnings and high-confidence low-severity ad hoc package installs, with no untrusted checkout or script injection.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.