@babel/plugin-proposal-private-methods

Registry deprecationdanger

The registry marks the package deprecated at package scope because the proposal is now part of ECMAScript and explicitly directs users to @babel/plugin-transform-private-methods. This makes the release unfit for a new dependency despite the active parent project.

Release historydanger

The package has had no releases in the last 12 months, with its latest release on April 4, 2023. The long release gap is consistent with the package's stated end of maintenance.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention the package, which would normally raise an ownership concern. The matching @babel namespace and Babel organization make a monorepo sub-package explanation plausible, so the concern is limited.

Workflow auditcaution

The audit completed all 13 workflows and found no untrusted checkout or script-injection sink, but 119 of 120 action references are unpinned and high-confidence template-injection findings remain. These are secondary workflow hygiene concerns, not the reason to reject this release.