babel-plugin-named-asset-import

Release historycaution

The package has 43 releases but none in the last 12 months, and its latest release was over four years ago; this materially raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of current maintenance for this release.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention the package, so package ownership and source correspondence are less transparent.

Workflow auditcaution

All eight action references are unpinned, a genuine reproducibility and workflow supply-chain hygiene gap. The high-confidence template-injection finding and low-confidence adhoc-package finding warrant attention, but neither is independently a severe verdict under the available workflow evidence.