babel-helper-regex

Release historydanger

The latest registry release was nearly nine years ago, with no releases in the last 12 months. This is a substantial freshness concern even though the project repository remains active.

Repo package mentioncaution

The repository name does not match the package and its README does not mention babel-helper-regex. Although a monorepo mismatch can be ordinary, the lack of a package mention leaves the linkage less transparent.

Workflow auditcaution

All 120 analyzed action references are unpinned, and the audit reports high-confidence template-injection findings plus trusted-publishing usage. No untrusted checkout or script-injection sink was found, limiting the severity but leaving meaningful workflow hygiene concerns.