@babel/plugin-transform-private-methods

Repo package mentioncaution

The linked repository is the Babel monorepo, but it neither matches the package name nor mentions this package in its README; that weakens direct package-to-source transparency, though the organization match provides some compensation.

Repo toolingcaution

The project uses established build tools, but no security scanning tools were detected; the repository's security policy partly compensates for that tooling gap.

Version stabilitycaution

Version 8.0.1 is a stable major release rather than a prerelease, although the recent prerelease share is high and indicates some release churn.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkout or script-injection counts, and most use read-only or job-level permissions. However, 119 of 120 action references are unpinned, and the audit reports high-confidence template-injection findings plus trusted publishing, creating meaningful workflow hygiene and release-process concerns.