babel-plugin-transform-es2015-arrow-functions

Release historycaution

The latest release was in October 2017, with no releases in the last 12 months despite a long release history of 36 versions. This is a meaningful freshness and abandonment concern for the specific release.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. Although a monorepo mismatch can be ordinary, the lack of a README mention makes package ownership less transparent.

Repo toolingcaution

The repository uses established build tools and has a working build setup, but no security-scanning tools were detected. The active project backing and separate security policy partly compensate for that tooling gap.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned, and high-confidence template-injection findings appear in release-related workflows. The audit also flags trusted publishing, while no untrusted checkout or script-injection sink was found, so this is workflow hygiene and supply-chain caution rather than a standalone critical verdict.