babel-plugin-transform-es2015-duplicate-keys

Release historycaution

The latest release was nearly nine years ago, with no releases in the last 12 months; this is a meaningful maintenance concern for a dependency, despite the package having 24 historical releases.

Repo package mentioncaution

The linked Babel repository neither matches the package name nor mentions it in the README, so the package-to-repository linkage is not transparent and may reflect monorepo packaging rather than a dedicated package reference.

Repo toolingcaution

The repository uses established build tools, but no security-scanning tools were detected; this is a modest transparency and hygiene gap, partly offset by the repository's security policy.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script injections, and most use read-only or job-level permissions. However, 119 of 120 action references are unpinned, and high-confidence template-injection findings remain in release workflows; the low-confidence cache finding is only a hygiene concern.