fast-png

Build provenancecaution

No build attestation or trusted publisher identity is present, reducing release transparency and making it harder to independently verify how the artifact was produced.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a recent pause in development despite the repository being unarchived and having a recent push timestamp.

Repo issue activitycaution

Only two issues and six pull requests are open, but there were no newly opened or closed issues or merged pull requests in the last month. This is a mild activity concern rather than evidence of abandonment by itself.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a meaningful security-maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.