@babel/plugin-transform-literals

Repo package mentioncaution

The linked repository is the Babel monorepo, but it neither matches the package name nor mentions this package in its README, so package-to-repository identity is less explicit than ideal.

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected; the repository's security policy provides some compensating transparency.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script-injection counts, and most workflows use read-only permissions. However, 119 of 120 action references are unpinned, and the audit found high-confidence template-injection patterns plus trusted-publishing usage, creating a meaningful workflow-hygiene concern.