npm package report

Is @babel/code-frame safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/babel__code-frame
npm packagelast checked 2026-09-19

@babel/code-frame · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 2 graph-tracked dependencies · provenance: verified (sigstore)

Re-check live →

SIGNALS
Commit-Level AnalysisclearOK

11 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES
@babel/helper-validator-identifier@^7.25.9clean
@babel/highlight@^7.0.0clean
PACKAGE @babel/code-frameECOSYSTEM npmDECISION ALLOW

Package facts

Weekly downloads
298.3M
GitHub stars
43.9k
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
2

History on this package: popular package (100 versions over 113d) with pattern-only evidence — de-escalated for review rather than blocked

Baked snapshot · run a live check for the current verdict · browse all packages

Other package reports

babel__corebabel__eslint-parserbabel__generatorbabel__clibabel-plugin-istanbulbabel-loader

See all package reports or check any package live.