joeri-abbo/safe-svg

Release historycaution

This is the only release, published about five years ago, with no releases in the last 12 months. That materially raises maintenance and compatibility uncertainty, although the repository is not archived.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although it was pushed recently, the lack of observed commit activity weakens evidence of ongoing maintenance.

Repo package mentioncaution

The repository name is “save-svg” rather than “safe-svg,” and the README does not clearly mention the package. That mismatch makes package ownership and source provenance less transparent.

Security policycaution

No repository security policy was found. For a package that sanitizes uploaded SVG content, the missing reporting guidance is a meaningful transparency and maintenance gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, leaving avoidable dependency-hygiene risk.