@babel/plugin-transform-optional-catch-binding

Repo package mentioncaution

The linked repository is a Babel monorepo and does not match or mention this package by name; organization backing makes a subpackage explanation plausible, but the missing explicit reference is still a provenance-transparency caution.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script injections, and 10 use read-only permissions. However, 119 of 120 action references are unpinned, and high-confidence template-injection findings plus a trusted-publishing finding leave workflow hygiene below ideal.