@babel/highlight

Release historycaution

The package has 71 releases since 2018, but none in the last 12 months and its latest release was about two years ago. Active repository work partly offsets abandonment concerns, but this release may be stale.

Repo package mentioncaution

The repository neither matches the package name nor mentions it in its README, which makes package ownership less transparent; the organization-backed Babel monorepo provides partial context but does not remove the gap.

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected. The repository's separate security policy provides some compensating transparency.

Workflow auditcaution

The audit completed all 13 workflows, but 119 of 120 action references are unpinned, creating avoidable workflow supply-chain maintenance risk. High-confidence template-injection findings and trusted publishing also warrant caution, while the low-confidence cache finding is only hygiene.