@babel/plugin-syntax-optional-catch-binding

Release historycaution

The package has not released since January 2020, more than six years ago, despite 38 releases historically. That makes this version stale, although the repository remains active.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package. This is plausible for a Babel monorepo subpackage, but the missing explicit mention leaves some package-to-repository transparency uncertainty.

Repo toolingcaution

The repository uses established build tooling, including Babel, TypeScript, Gulp, Rollup, and npm scripts. No security scanning tools were detected, which is a modest hygiene gap.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned, and the audit found high-confidence template-injection findings plus a trusted-publishing finding. No untrusted checkout or script-injection path was detected, limiting the severity but leaving meaningful workflow hygiene concerns.