@babel/plugin-proposal-nullish-coalescing-operator

Registry deprecationdanger

The entire package is deprecated because the proposal became part of ECMAScript, and the registry directs users to @babel/plugin-transform-nullish-coalescing-operator. This is a direct maintenance and adoption risk for a new dependency.

Release historycaution

The package has had no release in more than three years, despite 59 releases historically. The long prior release history shows maturity, but the current pause supports the package-level deprecation finding.

Repo package mentioncaution

The linked repository is a monorepo whose name does not match the package and whose README does not mention it, creating some package-to-source traceability uncertainty. The Babel organization backing and large repository tree partly explain the mismatch.

Workflow auditcaution

The audit analyzed all 13 workflows and found no untrusted checkouts or script injection, but 119 of 120 action references are unpinned. It also reported high-confidence template-injection findings and a trusted-publishing finding; these are workflow hygiene concerns, not the main reason to reject this release.