babel-traverse

Release historycaution

This package has had 78 releases, but none in the last eight years; its latest registry release was in October 2017. That strongly lowers confidence in this specific release despite the active source project.

Repo package mentioncaution

The linked repository does not match the package name and does not mention babel-traverse in its README. Although a monorepo can explain the name mismatch, the missing package mention leaves package ownership less transparent.

Workflow auditcaution

The audit analyzed all 13 workflows and found no untrusted checkout or script-injection sink, but 119 of 120 action references are unpinned and it reported high-confidence template-injection findings plus trusted-publishing use. These are workflow-hygiene and release-integrity concerns, not standalone evidence of an unfit package.