bartdecorte/imagick-svg

Release historydanger

The package has had five releases, but none in more than four years; the latest release was in March 2022. This is strong evidence of inactive maintenance for a library dependency.

Repo issue activitycaution

There have been no new or closed issues or pull requests in the last month, and no open work remains visible. This is consistent with the package's broader inactivity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling is configured. That is a modest transparency and maintenance gap, not a standalone adoption blocker.

Security policycaution

The repository has no security policy. For a package that parses SVG input, this leaves vulnerability reporting expectations unclear and lowers maintenance transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. This is a supply-chain hygiene gap without an untrusted execution sink.