@rolldown/plugin-babel

Repo bus factorcaution

One contributor made about 94.7% of the 19 recent commits, creating concentration risk. The second contributor remains active and the repository is organization-owned, which partly compensates but does not remove the concern.

Repo toolingcaution

The repository uses TypeScript, Vitest, and Vite, and the source tree includes tests and build infrastructure; however, no security-scanning tools were detected, leaving a modest security-process gap.

Token permissionscaution

Three workflows lack top-level permissions declarations and two declare top-level write access, while three use read-only permissions. This is a workflow-hardening gap, though it is not accompanied by the dangerous-workflow patterns detected elsewhere.

Version stabilitycaution

Version 0.2.4 is not a stable-major release, so API compatibility may still evolve, but it is not marked as a prerelease and recent releases are consistently non-prerelease.