babel-plugin-transform-es2015-modules-umd

Release historydanger

The latest release was published in October 2017, with no releases in the last 12 months; this is a substantial staleness concern for a dependency, despite the package having 41 historical releases.

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, so the package-to-source relationship is not clearly demonstrated; organization backing does not remove that transparency gap.

Workflow auditcaution

All 13 workflows were analyzed and no untrusted checkout or script-injection sink was found, but 119 of 120 action references are unpinned; this weakens workflow reproducibility and supply-chain hygiene.