babel-plugin-transform-es2015-literals

Release historycaution

The package has had no registry release in more than eight years, despite a history of 33 releases; this raises maintenance and compatibility concerns for this specific release.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-source relationship is less explicit; the organization-owned monorepo context provides only partial compensation.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected; the active project and separate security policy partly offset that hygiene gap.

Workflow auditcaution

All 13 workflows were analyzed, with no untrusted checkouts or script-injection counts, but 119 of 120 action references are unpinned and the audit found high-confidence template-injection findings plus trusted-publishing usage. These are meaningful workflow hygiene and release-supply-chain concerns, though not by themselves evidence that the package is unsafe.