babel-plugin-extract-import-names

Package scaffoldingdanger

The package includes a README stating it is no longer maintained, while repository tests, changelog, and a GitHub release for this version provide useful project context. The positive repository evidence does not offset the package's maintenance warning.

Registry deprecationdanger

NPM marks the entire package as deprecated, with no replacement specified. This is a severe adoption risk because the published package is explicitly withdrawn from continued use.

Release historycaution

The package has 59 releases and a fast historical median interval, but it has had no releases in the last 12 months and its latest registry release was in October 2024. This supports the abandonment concern.

Repo package mentioncaution

The linked repository name differs from the package name and its README does not mention this package, so the repository may be a broader monorepo rather than direct package-specific evidence. The mismatch is cautionary, though it is consistent with a sub-package layout.

Workflow auditcaution

All 3 workflows were analyzed without findings or untrusted checkout and script-injection sinks, but all 10 action references are unpinned. That is a workflow reproducibility and supply-chain hygiene gap, not a standalone severe risk.