babel-plugin-syntax-dynamic-import

Release historycaution

The package has had no registry release for nearly nine years, despite 17 releases historically; this is a meaningful maintenance concern for the assessed version.

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, so the link does not clearly establish that the repository specifically maintains this package.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected, leaving a modest transparency gap.

Workflow auditcaution

The audit found 119 of 120 action references unpinned and high-confidence template-injection findings in release workflows; the low-confidence cache finding is only hygiene, while the trusted-publishing finding adds a smaller credential-management concern.