lovell/sharp
High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, AVIF and TIFF images. Uses the libvips library.
32.8k stars · 1.4k forks · JavaScript
Caution
Caution: one person wrote most of the recent commits.
Why
- One person wrote 80% of human commits in the last year, so the project depends on them continuing. (source 1, source 2)
What would change this
- A second person takes a substantial share of commits.
Maintenance
CompleteActive
- Human commits, 30 days
- 38
- Human commits, 90 days
- 57
- Human commits, 365 days
- 235
- Bot share of commits, 365 days
- 5%
- Last commit
- Oct 13, 2026 (1 day ago)
- Last human commit
- Oct 13, 2026 (1 day ago)
- Authors, 90 days
- 10
- Last release
- Sep 27, 2026 (17 days ago)
- Median PR merge time
- 6 hours
Responsiveness: of 22 recent issues, 95% got a maintainer reply. Median first response: 14 hours.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Personal account
- Commits sampled
- 235 since Oct 14, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 2
- Contributors
- 229
Top committers
- lovell: 80% of commits
- metsw24-max: 9% of commits
- kleisauke: 5% of commits
- florian-lefebvre: 1% of commits
- lazerg: 1% of commits
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- May 19, 2014 to Jun 12, 2014: about 1.3k more stars than usual, peak 207 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jun 23, 2014 to Jun 23, 2014: about 23 more stars than usual, peak 28 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Oct 7, 2015 to Oct 9, 2015: about 86 more stars than usual, peak 61 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- May 3, 2016 to May 5, 2016: about 43 more stars than usual, peak 30 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- May 18, 2017 to May 26, 2017: about 312 more stars than usual, peak 124 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- May 28, 2018 to Jun 1, 2018: about 73 more stars than usual, peak 28 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Dec 7, 2018 to Dec 14, 2018: about 800 more stars than usual, peak 211 in one day, a shape we can't classify. Outside explanation: a jump in forks.
- Nov 8, 2019 to Nov 13, 2019: about 134 more stars than usual, peak 66 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jul 1, 2025 to Jul 2, 2025: about 64 more stars than usual, peak 57 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- Dec 20, 2025 to Dec 21, 2025: about 60 more stars than usual, peak 56 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- 1 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Apache-2.0 (OSI-approved)
Packages
- sharp (NPM): latest 0.35.5, published Sep 27, 2026
Advisories for the latest version: none listed
Package and advisory data: deps.dev and OSV.
OpenSSF Scorecard: 6.8 out of 10 (via deps.dev).
Sources: GitHub: lovell/sharp, deps.dev: npm sharp
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/lovell/sharp)Earlier verdicts
- Oct 14, 2026: Caution
- Oct 14, 2026: Caution