@babel/plugin-proposal-object-rest-spread

Registry deprecationdanger

NPM marks the entire package deprecated because the proposal has been merged into the ECMAScript standard and the plugin is no longer maintained. This is a severe release-level adoption risk despite the active Babel repository.

Release historydanger

The package has 86 releases and a historical median interval of about 14 days, but it has had no releases in the last 12 months and its latest release was on April 4, 2023. The long release gap is consistent with the package being retired.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention this package, which creates some uncertainty about package-specific ownership. The @babel namespace and organization-owned repository partly compensate because this is consistent with a monorepo.

Workflow auditcaution

All 13 workflows were analyzed, with no untrusted checkout or script-injection findings, and most workflows use read-only or job-level permissions. However, 119 of 120 action references are unpinned, and a high-confidence trusted-publishing finding uses long-lived registry credentials, leaving a meaningful workflow hygiene concern.