@babel/plugin-syntax-dynamic-import

Release historycaution

The package has had no release in the last six years, despite 38 releases overall. The actively maintained source repository partly offsets abandonment concerns, but this specific release is notably stale.

Repo package mentioncaution

The linked Babel monorepo neither matches the package name nor mentions it in the README, so package-to-repository ownership is less transparent. The organization backing and matching namespace provide some compensation.

Repo toolingcaution

The repository uses established build tooling, though no security-scanning tools were detected. The broader maintenance evidence keeps this from being a major health concern.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned and the audit reported high-confidence template-injection findings plus trusted-publishing usage. No untrusted checkout or script-injection sink was found, limiting the severity.