@babel/plugin-syntax-object-rest-spread

Release historycaution

The package has had no registry release in over six years, despite a historically active cadence of about nine days between releases. This materially lowers confidence that version 7.8.3 remains the maintained choice.

Repo package mentioncaution

The linked repository name does not match this package and its README does not mention it. This is common for a monorepo subpackage, but the collected evidence still leaves package-to-repository ownership less explicit.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned. High-confidence template-injection findings affect release-related workflows, while the low-confidence cache finding is only hygiene; the audit therefore warrants caution rather than a severe verdict.