@svgr/webpack

Release historycaution

The package has 50 releases since June 2018, but its latest registry release was about three years ago and there were no releases in the last 12 months. This is the main maintenance concern.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. The recent push timestamp is reassuring, but it does not offset the lack of observed recent commit activity.

Repo issue activitycaution

Only one issue and one pull request were opened in the last month, with none closed or merged, suggesting limited current project throughput alongside the repository's continued availability.

Workflow auditcaution

The single workflow is fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection path. However, both action references are unpinned and a high-confidence finding reports installation outside a lockfile, creating a modest workflow supply-chain hygiene concern.