babel-generator

Release historycaution

The package has 94 releases and a four-day median interval historically, but its latest release was about eight years ago and there were no releases in the last 12 months. Active repository work partly offsets this, but the assessed registry version is stale.

Repo package mentioncaution

The repository name does not match babel-generator and its README does not mention the package, so the package-to-repository link is less transparent. The organization-owned Babel monorepo context partly explains the mismatch but does not remove the documentation gap.

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected. The active organization and repository security policy provide some compensation, though this remains a minor transparency gap.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned and the audit found high-confidence template-injection patterns plus a trusted-publishing finding. Pull-request-target workflows had no untrusted checkouts or script injections, limiting the severity.