@babel/plugin-proposal-json-strings

Registry deprecationdanger

The package is deprecated at package scope because the proposal entered the ECMAScript standard, and npm directs users to @babel/plugin-transform-json-strings. This directly makes the release unfit for a new dependency.

Release historydanger

The latest release was over 3 years ago, with no releases in the last 12 months, despite 37 releases overall. The earlier regular cadence does not offset the long period of inactivity.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package. Although this can occur for a monorepo sub-package, the indicator still leaves package ownership less explicit.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned and high-confidence template-injection findings were reported; the low-confidence cache finding is only hygiene. No untrusted checkout or script-injection sink was found, so this is a caution rather than a standalone severe risk.