goat1000/svggraph

A long project history, recent release notes, and a small runtime dependency set support continued use. The open issue backlog, absent security policy, and concentrated maintenance leave more follow-up risk than a mature team-backed project.

Latest 3.20.3

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

The artifact includes multiple license files and declares LGPL-3.0-only, but the detected license text includes GPL-3.0 as well. That declaration and detection mismatch warrants checking the intended licensing terms before distribution.

Release history

The package has existed for over 11 years with 46 releases, but only one release in the last 12 months. The latest release is recent, so this indicates slower current cadence rather than abandonment.

Repo bus factor

All two recent commits came from one contributor, giving the project a single-person maintenance dependency. The repository is user-owned rather than organization-owned, so there is no provided backing evidence to offset that concentration.

Repo commit activity

Two commits were made in the last three months, showing some ongoing work, but the volume is low for a library with an active issue backlog.

Repo issue activity

There are 41 open issues, with two new issues and no issues or pull requests closed in the last month. This suggests unresolved maintenance load, although the short observation window limits its severity.