libheif-js

Repo bus factorcaution

One contributor made all six commits in the last three months, leaving maintenance dependent on a single active person despite the repository being organization-owned.

Repo commit activitycaution

Six commits were made in the last three months by one active maintainer, showing recent work but a narrow maintenance base.

Repo toolingcaution

The project uses esbuild and Babel, but no security-scanning tools were detected; this is a transparency and maintenance gap rather than evidence of a severe defect.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less clear for users of this image-processing package.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings and scopes permissions at job level, but all five action references are unpinned, leaving build inputs less reproducible.