@babel/helper-string-parser

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating uncertainty about package ownership. The matching Babel organization and large monorepo context partly compensate, but the identity gap remains.

Repo toolingcaution

The repository uses established build tooling and has a real build pipeline. No security-scanning tools were detected, leaving a modest security-process gap, but the repository does provide a security policy.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script-injection sinks, and most workflows use read-only or job-level permissions. However, 119 of 120 action references are unpinned, and trusted-publishing was flagged; high-confidence template-injection findings remain workflow hygiene concerns without a corroborating sink.