gm
GraphicsMagick and ImageMagick for node.js
15%
Total Score
25
100
75
50
50
Health Score Breakdown
npm marks the entire package as sunset and directs users to migrate because the project is not maintained. This makes the release unfit for a new dependency.
The repository recorded zero commits and zero active maintainers over the last three months, providing direct evidence of current abandonment.
There are 325 open issues and 41 open pull requests, with no new or closed issues or pull requests in the last month; the backlog is not being actively handled.
No build attestation or trusted-publisher provenance is present, reducing publication transparency for this release.
Only one account has registry publish access. That is a thin publishing base and provides little redundancy for future releases.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2015-7982 gm is vulnerable to Improper Neutralization of Special Elements used in a Command ('Command Injection') in versions 0.0.0 - 1.20.0. | 0.0.0 - 1.20.0 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 debug Version ^3.1.0 | — | — |
cross-spawn Version ^7.0.5 | — | — |
array-series Version ~0.1.5 | — | — |
array-parallel Version ~0.1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 15 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.