@svgr/babel-plugin-remove-jsx-attribute

Release historycaution

The package has existed since 2018 with 13 releases, but its latest registry release was in May 2023 and it had no releases in the following 12 months, indicating an aging published artifact.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning that is partly offset by the repository's recent push date and broader project history.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this exact package, leaving some uncertainty about package-specific ownership; the mismatch is also consistent with a subpackage in a monorepo.

Security policycaution

The linked repository has no security policy, leaving a transparency and vulnerability-reporting gap for a package intended for build tooling.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, but both action references are unpinned and the audit found a high-confidence adhoc package installation; these are workflow hygiene and reproducibility concerns rather than severe risks.