vite-plugin-svgr

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence is present, leaving the relationship between source and artifact less transparent.

Lifecycle scriptscaution

A prepare script runs during installation, adding some execution surface, though this is common for packages that build or prepare artifacts.

Maintainerscaution

Only one registry publishing account is listed, which creates a thin publishing base; the linked repository is also owned by an individual, so there is no organizational backing shown to offset that concern.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the project does not show institutional backing to compensate for its thin maintainer base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning; the recent release and same-day push partly offset, but do not erase, it.