@babel/plugin-transform-parameters

Repo package mentioncaution

The linked repository is a monorepo whose name does not match the package and whose README does not mention it; this creates a transparency caveat, although the matching @babel organization backing and package context reduce the concern.

Repo toolingcaution

The repository uses multiple build tools and has an established build process, but no security-scanning tools were detected, leaving a security-hygiene gap.

Token permissionscaution

Ten workflows declare read-only permissions, but two lack top-level permissions and one has top-level write access, so workflow permission hygiene is not uniformly restrictive.