@babel/helper-module-transforms
Babel helper functions for implementing ES6 module transformations
83
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
hzooexistentialismnicolo-ribaudojlhwung
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): jlhwung and nicolo-ribaudo are both recognized Babel core team members; publisher rotation within the Babel team is expected and not a security concern for this package. | ai | |
| dependencies | unvetted-dep:@babel/helper-module-imports | AI (dependencies): @babel/helper-module-imports is a core Babel monorepo package and a well-known, legitimate dependency of this helper. Stable false positive for this package. | ai | |
| dependencies | unvetted-dep:@babel/traverse | AI (dependencies): @babel/traverse is a core Babel monorepo package and a well-known, legitimate dependency of this helper. Stable false positive for this package. | ai | |
| provenance | missing-githead | AI (provenance): Babel monorepo publish pipeline change; missing gitHead is a process artifact, not a security signal, for this well-established package. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): developit (Jason Miller) stepping back from Babel is a well-known, publicly documented team change, not a suspicious removal. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): New deps (@babel/traverse, @babel/helper-validator-identifier) are first-party Babel packages from the same publisher team; not a third-party supply chain risk. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): jlhwung is a known Babel contributor; addition is a legitimate team expansion for the Babel project, not a suspicious takeover. | ai | |
| bogus-package | bogus-package | AI (bogus-package): loganfsmyth and hzoo are Babel project founders, not spam publishers. This is a stable false positive for the @babel/* namespace. | ai | |
| provenance | no-provenance | AI (provenance): Already marked accepted risk; Babel monorepo packages historically published without Sigstore provenance. | ai |
Versions (showing 83 of 83)
| Version | Deps | Published |
|---|---|---|
| 8.0.1 | 3 / 1 | |
| 8.0.0 | 3 / 1 | |
| 7.29.7 | 3 / 1 | |
| 7.28.6 | 3 / 1 | |
| 7.28.3 | 3 / 1 | |
| 7.27.3 | 3 / 1 | |
| 7.27.1 | 3 / 1 | |
| 7.26.0 | 3 / 1 | |
| 7.25.9 | 4 / 1 | |
| 7.25.7 | 4 / 1 | |
| 7.25.2 | 4 / 1 | |
| 7.25.0 | 4 / 1 | |
| 7.24.9 | 5 / 1 | |
| 7.24.8 | 5 / 1 | |
| 7.24.7 | 5 / 1 | |
| 7.24.6 | 5 / 2 | |
| 7.24.5 | 5 / 2 | |
| 7.23.3 | 5 / 2 | |
| 7.23.0 | 5 / 2 | |
| 7.22.20 | 5 / 2 | |
| 7.22.19 | 5 / 2 | |
| 7.22.18 | 5 / 2 | |
| 7.22.17 | 5 / 2 | |
| 7.22.15 | 5 / 2 | |
| 7.22.9 | 5 / 2 | |
| 7.22.5 | 8 / 0 | |
| 7.22.1 | 8 / 0 | |
| 7.22.0 | 8 / 0 | |
| 7.21.5 | 8 / 0 | |
| 7.21.2 | 8 / 0 | |
| 7.21.0 | 8 / 0 | |
| 7.20.11 | 8 / 0 | |
| 7.20.7 | 8 / 0 | |
| 7.20.2 | 8 / 0 | |
| 7.19.6 | 8 / 0 | |
| 7.19.0 | 8 / 0 | |
| 7.18.9 | 8 / 0 | |
| 7.18.8 | 8 / 0 | |
| 7.18.6 | 8 / 0 | |
| 7.18.0 | 8 / 0 | |
| 7.17.12 | 8 / 0 | |
| 7.17.7 | 8 / 0 | |
| 7.17.6 | 8 / 0 | |
| 7.16.7 | 8 / 0 | |
| 7.16.5 | 8 / 0 | |
| 7.16.0 | 8 / 0 | |
| 7.15.8 | 8 / 0 | |
| 7.15.7 | 8 / 0 | |
| 7.15.4 | 8 / 0 | |
| 7.15.0 | 8 / 0 | |
| 7.14.8 | 8 / 0 | |
| 7.14.5 | 8 / 0 | |
| 7.14.2 | 8 / 0 | |
| 7.14.0 | 8 / 0 | |
| 7.13.14 | 8 / 0 | |
| 7.13.12 | 8 / 0 | |
| 7.13.0 | 9 / 0 | |
| 7.12.17 | 9 / 0 | |
| 7.12.13 | 9 / 0 | |
| 7.12.1 | 9 / 0 | |
| 7.12.0 | 9 / 0 | |
| 7.11.0 | 7 / 0 | |
| 7.10.5 | 7 / 0 | |
| 7.10.4 | 7 / 0 | |
| 7.10.1 | 7 / 0 | |
| 7.9.0 | 7 / 0 | |
| 7.8.6 | 7 / 0 | |
| 7.8.3 | 6 / 0 | |
| 7.8.0 | 6 / 0 | |
| 7.7.5 | 6 / 0 | |
| 7.7.4 | 6 / 0 | |
| 7.7.0 | 6 / 0 | |
| 7.5.5 | 6 / 0 | |
| 7.4.4 | 6 / 0 | |
| 7.4.3 | 6 / 0 | |
| 7.2.2 | 6 / 0 | |
| 7.1.0 | 6 / 0 | |
| 7.0.0 | 6 / 0 | |
| 8.0.0-rc.3 | 3 / 1 | |
| 8.0.0-rc.2 | 3 / 1 | |
| 8.0.0-rc.1 | 3 / 1 | |
| 8.0.0-beta.4 | 3 / 1 | |
| 7.0.0-beta.34 | 5 / 0 |