@babel/plugin-proposal-json-strings
Escape U+2028 LINE SEPARATOR and U+2029 PARAGRAPH SEPARATOR in JS strings
18
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
hzooexistentialismnicolo-ribaudojlhwung
Keywords
babel-plugin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Babel monorepo publish process change; not a security signal for this well-established official package. | ai | |
| provenance | no-provenance | AI (provenance): Version predates Sigstore provenance adoption; informational only for this trusted Babel publisher. | ai | |
| provenance | publisher-changed | AI (provenance): nicolo-ribaudo is a core Babel maintainer; the hzoo→nicolo-ribaudo transition is a documented Babel team reorganization, not a compromise. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): nicolo-ribaudo is a well-known Babel core contributor with extensive track record; addition reflects legitimate team transition. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Removal of xtuc is part of the same documented Babel team reorganization; no indication of malicious takeover. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Babel monorepo intentionally produces many similarly-named packages; tiny payload is normal for a small plugin delegating to helpers. | ai |