@babel/helper-optimise-call-expression

Repo package mentioncaution

The linked repository is the Babel monorepo but neither matches the package name nor mentions it in the README, creating some uncertainty about package-to-repository traceability; the organizational monorepo context makes this less severe than an unrelated repository.

Workflow auditcaution

The audit analyzed all 13 workflows, but 119 of 120 action references are unpinned, and it found high-confidence template-injection findings in release-related workflows. The low-confidence cache finding is minor, while the reported trusted-publishing issue is partly offset by the release’s npm provenance.