Canvas for Node.js with skia backend
79%
Total Score
healthy
Active releases and maintained source offset fully unpinned workflows and weak direct package-to-repository identification.
One contributor made about 73% of recent commits, but two other contributors were active, so concentration is a moderate resilience concern rather than a severe abandonment signal.
The repository name does not match this platform package and its README does not mention it, creating some uncertainty about direct ownership even though the package readme identifies it as a canvas binary.
All 96 referenced actions are unpinned, and the audit found high-confidence low-severity ad hoc package installs; low-confidence cache findings are hygiene concerns, while no untrusted checkout or script injection was found.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.