@babel/plugin-proposal-function-sent

Compile the function.sent meta property to valid ES2015 code

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

hzooexistentialismnicolo-ribaudojlhwung

babel-plugin

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): Babel project migrated to GitHub Actions CI/CD publishing; this is a legitimate and expected transition for the @babel scope.	ai	2026/04/23
provenance	no-provenance	AI (provenance): Babel packages in this era were not yet using Sigstore provenance; absence is expected and not a risk indicator for this trusted publisher.	ai	2026/04/22
provenance	missing-githead	AI (provenance): Published by a well-established Babel core contributor (nicolo-ribaudo); missing gitHead reflects a publish environment change, not a supply chain compromise signal for this package.	ai	2026/04/22
maintainer-change	maintainer-removed	AI (maintainer-change): Removal of developit is consistent with documented Babel maintainer transitions; no evidence of hostile takeover given the trusted publisher.	ai	2026/04/22
maintainer-change	maintainer-added	AI (maintainer-change): Babel is a large OSS project with routine maintainer rotations managed by the core team; nicolo-ribaudo (publisher) is a known Babel core contributor, making this a legitimate roster change.	ai	2026/04/22
bogus-package	bogus-package	AI (bogus-package): hzoo (Henry Zhu) is the creator of Babel; spam flag is a false positive for this package.	ai	2026/04/22
dependencies	unvetted-dep:@babel/plugin-syntax-function-sent	AI (dependencies): Sibling package within the official babel/babel monorepo, published by the same Babel team. Stable false positive for this package.	ai	2026/04/22

Hide prereleases