@babel/plugin-transform-flow-strip-types

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which weakens direct package-to-repository traceability; the organization-owned monorepo context makes this less concerning than an unrelated repository.

Repo toolingcaution

The project uses established build tools, but no security-scanning tools were detected; the repository's security policy and other controls partly compensate for that gap.

Workflow auditcaution

The audit analyzed all 13 workflows and found no untrusted checkouts or script injection, but 119 of 120 action references are unpinned and a high-confidence trusted-publishing finding remains; the high-confidence template-injection findings are hygiene concerns without a matching untrusted sink here.