parse-svg-path

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, leaving release provenance less transparent than it could be.

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-backed, so this represents a thin publishing base, although access records alone do not establish inactivity.

Project backingcaution

The repository is owned by an individual account, so there is no organization backing shown to compensate for the single registry maintainer or sparse activity.

Release historycaution

The package is mature at over 12 years old, but it has only four releases with a median interval of about 2.8 years; one release in the last year shows some current activity without a regular cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. The recent push and latest release provide some compensation, but ongoing maintenance evidence remains thin.