sowrensen/svg-avatar-generator

Release historycaution

The package has been maintained since February 2023 and released v3.0.0 in April 2026, but only one release appeared in the last 12 months, indicating a modest release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The June 2026 push and April release provide some recent evidence, but the current pause still raises maintenance risk.

Security policycaution

No SECURITY policy is present, which reduces transparency for reporting vulnerabilities, although this is a smaller concern for a focused Laravel library than for a security-sensitive service.

Workflow auditcaution

All 10 analyzed action references are unpinned, and a high-confidence bot-conditions finding reports that actor context may be spoofable in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, limiting the risk but not removing the hygiene concern.