babel-helper-get-function-arity

Package scaffoldingcaution

The artifact includes a README, while the source repository has tests and a changelog. The README is only 50 characters and says “TODO,” so consumer documentation remains weak despite source-project documentation.

Release historycaution

This release is nearly nine years old, and the package has had no releases in the last 12 months. Its 44-release history shows prior activity, but does not offset the long period without a new release.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package. This is plausible for a monorepo subpackage, but the lack of an explicit mention leaves some uncertainty about package-to-repository mapping.

Workflow auditcaution

The audit covered all 13 workflows, with no untrusted checkouts or script-injection findings, and most jobs use read-only permissions. However, 119 of 120 action references are unpinned, and high-confidence template-injection findings plus trusted-publishing usage weaken workflow and release hygiene.