Fast and advanced TIFF decoder
55%
Total Score
50
100
85
83
The package has only three releases, with none in the last 12 months and the latest published over three years ago. This indicates materially reduced maintenance activity.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the stale registry release history, this supports a maintenance caution.
The repository name does not match the package name and its README does not mention this package. That weakens confidence that the linked source is the release's intended project.
The repository reports no build tooling or security scanning. For this small, directly published JavaScript package, the lack of build tooling is understandable, but the absence of security scanning is a modest transparency gap.
No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pako Version ^1.0.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.