svg-tags

Release historycaution

The package is about 12 years old but has only two releases, both published within minutes in 2014, with no releases in the past 12 months. This strongly limits evidence of ongoing maintenance, though the package is a small stable data module.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, consistent with its last push in 2017. The absence of recent activity raises abandonment risk even for a stable package.

Repo toolingcaution

The repository uses Make for builds and tests, but no security scanning tooling is present. For this small, old package that is a modest transparency gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This reduces transparency for reporting vulnerabilities, although the package's small, dependency-free data footprint limits the practical impact.