babel-messages

Release historycaution

The package has received no registry release since September 2017, despite a long release history of 47 versions. That age raises maintenance and compatibility risk for this specific release.

Repo package mentioncaution

The repository name does not match babel-messages and its README does not mention the package. The organization-owned Babel monorepo makes a name mismatch understandable, but the missing README mention leaves some uncertainty about package ownership.

Repo toolingcaution

The project uses established build tooling and has 13 workflows under audit, but no security scanning tools were detected. The active build setup is positive while the missing scanning is a minor hygiene gap.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script-injection counts, but 119 of 120 action references are unpinned. High-confidence template-injection findings are hygiene concerns here because no matching untrusted sink was reported; the low-confidence cache finding carries little weight.