Babel

[jstettner]

Would it be safe to use babel to transform untrusted code before using the sandbox, or is would that open up opportunity for an attack?

[lbfalvy]

I can't see why not, Babel doesn't execute code and its plugins interact with it in a clean AST form. The probability of abuse is negligible.