← Home

babel-messages

Collection of debug messages used by Babel.

29
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

amasadhzoojmmloganfsmythsebmckthejameskyle

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): The sebmck→hzoo transition is the well-documented, publicly known handoff of Babel project stewardship in 2016. Stable historical fact for this package. ai
maintainer-change maintainer-added AI (maintainer-change): hzoo, jmm, and loganfsmyth are recognized Babel core contributors added during the 2016 project stewardship transition. Legitimate and stable for this package. ai
bogus-package bogus-package AI (bogus-package): loganfsmyth maintains many packages as part of the Babel monorepo; mass-production signal is a false positive for this well-known ecosystem. No keywords is trivial for a utility package. ai
dependencies unvetted-dep:babel-runtime AI (dependencies): babel-runtime is a core Babel v6 dependency; its use here is expected and legitimate for all versions of this package. ai

Versions (showing 29 of 29)

Version Deps Published
6.23.0 1 / 0
6.22.0 1 / 0
6.8.0 1 / 0
6.7.2 1 / 0
6.6.5 1 / 0
6.6.0 1 / 0
6.5.0 1 / 0
6.3.18 1 / 0
6.3.13 1 / 0
6.2.4 1 / 0
6.2.1 1 / 0
6.2.0 1 / 0
6.1.18 1 / 0
6.1.17 1 / 0
6.1.16 1 / 0
6.1.13 1 / 0
6.1.12 1 / 0
6.1.10 1 / 0
6.1.9 1 / 0
6.1.8 1 / 0
6.1.7 1 / 0
6.1.6 1 / 0
6.1.5 1 / 0
6.1.4 1 / 0
6.0.15 1 / 0
6.0.14 1 / 0
6.0.12 1 / 0
6.0.2 1 / 0
6.0.0 1 / 0