@babel/helper-hoist-variables

Release historycaution

The package has 71 releases and historically released about every 13 days, but its latest release was over two years ago and there were no releases in the last 12 months. The active repository partly offsets this, but the release itself appears stale.

Repo package mentioncaution

The package is part of the Babel organization’s monorepo, so the repository name mismatch is expected, but the README does not mention this package. That leaves some uncertainty about the package-to-repository linkage.

Workflow auditcaution

All 119 of 120 analyzed action references are unpinned, creating avoidable build-reproducibility risk. The audit also reports high-confidence template-injection findings and long-lived-token publishing, although no untrusted checkout or script-injection sink was found.