atelier/svg

Release historycaution

The package is only 122 days old and has two releases, with 122 days between them; this provides limited evidence of sustained maintenance.

Repo bus factorcaution

One contributor made 100% of the seven recent commits. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Seven commits were made in the last three months, showing recent work, although all activity came from one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and maintenance gap.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings or untrusted checkout sinks, but all 12 action references are unpinned and one workflow grants top-level write access.