canvg

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful maintenance and abandonment concern despite other signs of project backing.

Build provenancecaution

No build attestation or trusted publisher information was detected, limiting release transparency, although this is not by itself evidence of unsafe behavior.

Release historycaution

The package has existed since 2012 with 37 releases and a median release interval of about 50 days, showing substantial maturity, though no releases occurred in the last 12 months.

Repo issue activitycaution

There are recent issues and pull requests, including five new pull requests in the last month, but none were merged and no issues were closed in that period.

Repo toolingcaution

The repository uses TypeScript, Rollup, and related build tooling, but no security scanning tools were detected, leaving a security-process gap.