@svgr/plugin-prettier

Release historydanger

The package has 23 releases over roughly eight years, but it has had no releases in the last 12 months and the latest release was in August 2023, indicating a long maintenance gap.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, reinforcing the concern that active development has stalled despite the repository remaining available.

Build provenancecaution

No build attestation or trusted-publisher identity is present, reducing publication transparency, though this is a provenance gap rather than evidence of unsafe behavior by itself.

Maintainerscaution

Only one registry account has publish access. This is a modest supply-chain resilience concern because publishing capacity is concentrated, although the repository evidence provides some project context.

Project backingcaution

The package is under the @svgr namespace, but the repository owner is an individual account rather than an organization. This provides no strong organizational backing to offset the thin publishing base.