@babel/helper-annotate-as-pure

Repo package mentioncaution

The repository is the Babel monorepo rather than a name match, which is normal for a sub-package, but it neither matches the package name nor mentions it in the README. That weakens direct package-to-repository transparency.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected. The repository's security policy provides some compensating transparency, so this is a minor concern rather than a severe risk.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script-injection findings, but 119 of 120 action references are unpinned and the audit found high-confidence template-injection findings plus trusted-publishing usage. These are workflow hygiene and release-process concerns, not evidence that the package is unsafe by themselves.