@babel/plugin-transform-arrow-functions

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in its README, which can make package ownership less clear. The Babel organization backing and large monorepo structure partly compensate, but the mismatch remains a transparency caution.

Repo toolingcaution

The repository uses established build tooling and an active build system, but the collected values show no security-scanning tools. This is a minor transparency gap rather than a dependency-blocking issue.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned, creating avoidable supply-chain drift. High-confidence template-injection findings and a trusted-publishing finding also warrant workflow review; the low-confidence cache finding is only hygiene.