babel-plugin-transform-es2015-for-of
Compile ES2015 for...of to ES5
16
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
amasadhzoojmmloganfsmythsebmckthejameskyle
Keywords
babel-plugin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): hzoo and loganfsmyth are both well-known Babel core team members; this is a legitimate maintainer transition within the Babel project, not a compromise. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Flagged maintainers (sebmck, jmm, amasad, thejameskyle, hzoo, loganfsmyth) are all well-known Babel/JS ecosystem contributors; spam flag is a false positive for this package. | ai | |
| phantom-deps | phantom-dep:babel-runtime | AI (phantom-deps): babel-runtime is injected indirectly by Babel transform machinery, not via explicit require(); phantom-dep detection is a stable false positive for Babel plugins. | ai |