babel-plugin-syntax-async-functions

Release historycaution

The package has 33 releases but no release in the last nine years; that is a meaningful freshness and abandonment concern for this specific release, even though the source project remains active.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the linkage cannot be confirmed from the collected repository evidence. This may be ordinary for a monorepo subpackage but remains a transparency caution.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected. The active project and separate security policy partly compensate, so this is a limited hygiene concern rather than a severe risk.

Workflow auditcaution

All 13 workflows were analyzed, with no untrusted checkout or script-injection sink detected. However, 119 of 120 action references are unpinned, and the audit also flags high-confidence template-injection hygiene issues plus long-lived-token publishing, which lowers workflow transparency and reproducibility.