babel-plugin-check-es2015-constants

Release historycaution

The package has 41 releases but none in the last 12 months; its latest release was in October 2017. The active source project offsets abandonment concerns somewhat, but this release is substantially old.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention the package. This may be normal for a monorepo subpackage, but the missing direct reference leaves package ownership less transparent.

Workflow auditcaution

The audit analyzed all 13 workflows and found no untrusted checkout or script-injection sinks, but 119 of 120 action references are unpinned. High-confidence template-injection findings and trusted-publishing usage add workflow hygiene concerns, while the low-confidence cache finding is minor.