@babel/plugin-syntax-nullish-coalescing-operator

Release historycaution

The package has 38 releases but none in the last 12 months, with the latest release on January 13, 2020. Active repository commits partly compensate for the package's long release gap, but the release itself is dated.

Repo package mentioncaution

The repository name differs from the package name, which is normal for a monorepo, but the README does not mention this package. That leaves some uncertainty about the package-to-repository association.

Repo toolingcaution

The repository uses established build tools, but no security-scanning tools were detected. The broader repository security policy and workflow audit provide some compensating transparency.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned and high-confidence template-injection findings were reported in release-related workflows. A low-confidence cache-poisoning finding and an informational trusted-publishing finding add further hygiene concerns, although no untrusted checkout or script-injection sink was found.