Production Readiness of the contracts

I am looking for contracts to use to bridge a token to an OVM chain, these contracts look spot on for my needs.

This repo seems to contain OZ code, code from the Optimism stack contracts, and from Circle. Here are the questions for which I am looking answers for:
- Have these been audited ? The commit history seems to imply that they have been, but I can't find the actual audits.
- Are these within the scope of Coinbase's HackerOne Bug Bounty?
- Are these contracts production ready ? Are these contracts provided as ones that are suitable for production deployment to Base.

Any help would be greatly appreciated.

Thanks!