babel-code-frame

Release historycaution

The package has had no registry release for more than 8 years, despite 54 releases overall; that makes this exact version stale even though the source project is active.

Repo package mentioncaution

The repository name does not match this package and its README does not mention babel-code-frame, so the package-to-source relationship is less transparent; the mismatch is consistent with a monorepo sub-package but still warrants caution.

Workflow auditcaution

All 13 workflows were analyzed, with no untrusted checkout or script injection, but 119 of 120 action references are unpinned and high-confidence template-injection findings affect release-related workflows. The audit also reports a trusted-publishing finding, though it is informational.