@svgr/plugin-prettier
It includes a license, types, tests, release notes, and no install-time scripts. The repository is not archived, but its security policy is missing and its workflow uses unpinned actions and installs an ad hoc package.
58%
Total Score
38
100
80
67
50
Health Score Breakdown
The package has 23 releases over roughly eight years, but it has had no releases in the last 12 months and the latest release was in August 2023, indicating a long maintenance gap.
There were zero commits and zero active maintainers in the last three months, reinforcing the concern that active development has stalled despite the repository remaining available.
No build attestation or trusted-publisher identity is present, reducing publication transparency, though this is a provenance gap rather than evidence of unsafe behavior by itself.
Only one registry account has publish access. This is a modest supply-chain resilience concern because publishing capacity is concentrated, although the repository evidence provides some project context.
The package is under the @svgr namespace, but the repository owner is an individual account rather than an organization. This provides no strong organizational backing to offset the thin publishing base.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 prettier Version ^2.8.7 | — | — |
deepmerge Version ^4.3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 7 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.