@babel/plugin-syntax-typescript

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating a package-to-repository transparency gap. The matching Babel organization provides some context but does not remove that gap entirely.

Workflow auditcaution

The audit found 119 unpinned action references out of 120, plus high-confidence template-injection findings and an informational trusted-publishing finding. No untrusted checkout or script-injection path was reported, limiting the risk to workflow hygiene rather than a standalone severe concern.