png-js

Release historycaution

The package has existed for over 14 years and released only five times, with a median interval of about 3.5 years, but two releases occurred in the last 12 months. The recent activity partly compensates for the historically sparse cadence.

Repo toolingcaution

The project uses Rollup, Vitest, npm scripts, and Vite, and the repository contains tests, supporting a reproducible development workflow. No security scanning tools were detected, leaving a modest transparency gap.

Security policycaution

The repository has no security policy. This does not show that the release is unsafe, but it weakens disclosure and maintenance transparency.

Type declarationscaution

The package provides no type declarations, which makes integration less convenient for typed consumers. This is a consumer-ergonomics gap rather than evidence of abandonment.