image-q

Release historydanger

The package has 29 releases since June 2015 but none in the last 12 months; the latest release was in January 2022, indicating prolonged release inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the concern that maintenance has stalled.

Build provenancecaution

No build attestation or trusted-publisher identity is recorded, reducing release transparency even though the package has an established source repository.

Maintainerscaution

Only one registry publishing account is listed, leaving limited visible publishing capacity if that maintainer becomes inactive.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single visible maintainer represents a meaningful continuity risk.