@babel/helper-module-transforms

Repo package mentioncaution

The linked Babel monorepo neither matches this package name nor mentions it in the README, so package-to-repository ownership is less transparent. The organization-backed monorepo context makes a name mismatch ordinary, but the missing README mention remains a caution.

Workflow auditcaution

119 of 120 action references are unpinned, creating avoidable build-reproducibility risk; the audit also reports high-confidence template-injection findings and use of trusted publishing. No untrusted checkout or script-injection sink was found, and the low-confidence cache finding is only hygiene.