@babel/plugin-syntax-import-meta

Release historycaution

The latest registry release was over six years ago, with no releases in the last 12 months. The linked repository is active, but this specific release is substantially outdated.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention this package. Although the Babel organization makes a monorepo relationship plausible, the collected evidence leaves package-to-repository linkage less transparent.

Workflow auditcaution

The audit found 119 unpinned action references out of 120, high-confidence template-injection findings, and trusted publishing using long-lived credentials. Pull-request-target workflows had no reported untrusted checkouts or script injection, so these are workflow hygiene and supply-chain cautions rather than a standalone severe verdict.