babel-plugin-transform-es2015-unicode-regex

Release historydanger

The package has had no release for nearly 9 years, with zero releases in the last 12 months. Its earlier 34-release history shows it was once actively published, but does not offset the long period of inactivity for this specific package.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the link does not clearly establish package-specific ownership. The organization-backed monorepo context reduces but does not remove that transparency concern.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script-injection findings, and most workflows use read-only or job-level permissions. However, 119 of 120 action references are unpinned, and the audit reports high-confidence template-injection hygiene findings plus use of long-lived registry publishing credentials, which lowers workflow transparency and reproducibility.