metro-react-native-babel-transformer

Release historycaution

There were 0 releases in the last 12 months, despite 70 releases historically and a roughly 15-day median interval; this makes the published package look stale, although repository activity shows ongoing project work.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-repository linkage is less transparent; the monorepo context makes a subpackage relationship plausible but does not remove the gap.

Workflow auditcaution

All 8 action references are unpinned, weakening build reproducibility. The audit also found one high-confidence template-injection pattern, but there are no pull_request_target or workflow_run triggers and no untrusted checkout or script-injection sinks, so this remains a hygiene concern rather than a severe workflow risk.