Last 12 weeks · 0 commits
1 of 6 standards met
The Readme already includes the full MIT license text, but has no field, so npm reports the package license as undefined. This trips license-compliance scanners (Aikido, Snyk, FOSSA, etc.) in every project that pulls in transitively — most commonly via . This PR: adds to (matching the license already stated in the Readme) adds a file with the same MIT text from the Readme No functional changes. A patch release to npm would let downstream projects clear the false-positive license findings. 🤖 Generated with Claude Code
With the rise in supply chain attacks and OSS dependencies being used as a attack vector, Microsoft is working with our ecosystem partners, such as the Linux Foundation's OpenSSF, to enable OSS consumers to track packages back to their public sources. We've identified that the following packages published to NPM do not report where sources can be found, typically accomplished by including a link to your GitHub repository in your REPOSITORY field. This PR was created to add this value, ensuring future releases will include this provenance information. Published NPM packages with repository information: term-canvas
v0.5.9 home/wb-zhanyanming/vcanvas/lib/context2d.js:81 var hr = Array(w + 1).join('-'); ^ RangeError: Invalid array length at Context2d.strokeRect (/home/wb-zhanyanming/vcanvas/lib/context2d.js:81:12) at Timer. (/home/wb-zhanyanming/vcanvas/examples/rects.js:34:7) at Timer.ontimeout (timers_uv.js:208:14) could you pleas add a statement of which version would be supported?
Repository: tj/term-canvas. Description: javascript canvas api for your terminal! Stars: 229, Forks: 19. Primary language: JavaScript. Languages: JavaScript (100%). Open PRs: 4, open issues: 1. Last activity: 5y ago. Community health: 28%. Top contributors: tj.