alnv/tinypng-adapter-bundle

Release historydanger

This is the package's only release, published over four years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has stopped receiving maintenance.

Licensecaution

The manifest declares a proprietary license, so the release is licensed, but the terms may restrict reuse and are less suitable for an open-source dependency than a recognized open-source license.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link provides weak evidence that this is the package's maintained source.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is less severe than the maintenance evidence.