@svgr/babel-plugin-transform-svg-component

Build provenancecaution

No build attestation or trusted-publisher provenance is present, limiting publication transparency, although this is not by itself evidence of an unsafe release.

Release historycaution

The package has 24 releases over nearly eight years, but none in the last three years; the established history is outweighed by the long current gap.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is a meaningful maintenance concern despite the repository not being archived.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package; although a monorepo can legitimately contain sub-packages, the ownership link is not explicit.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.