@babel/code-frame

Repo package mentioncaution

The repository name does not match the package and its README does not mention @babel/code-frame, which creates package-identity ambiguity; the Babel organization and monorepo context reduce but do not eliminate that concern.

Repo toolingcaution

The project uses established build tooling, but no security scanning tools were detected; the documented security policy and active maintenance partly compensate for that hygiene gap.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script-injection sinks, but 119 of 120 action references are unpinned and the audit flags high-confidence template-injection patterns plus trusted-publishing usage. These workflow weaknesses warrant caution even with mostly scoped permissions.