@babel/plugin-syntax-numeric-separator

Release historycaution

The package has 40 releases, but its latest release was June 30, 2020, with no releases in the last 12 months. The active source repository partly compensates for the age, but this specific release is substantially old.

Repo package mentioncaution

The linked repository is the Babel monorepo, but it neither matches the package name nor mentions it in the README. That weakens package-to-repository transparency, although the organizational monorepo context partly explains the mismatch.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned, creating a meaningful reproducibility and action-substitution weakness. High-confidence template-injection findings and trusted publishing were also reported, although no untrusted checkout or script-injection sink was found.