@babel/compat-data

Dangerous workflowscaution

Two of 13 workflows use pull_request_target, which warrants scrutiny because that trigger can expose privileged workflow context, but no untrusted checkout or script-injection patterns were detected.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention @babel/compat-data, creating some uncertainty about direct package-to-repository linkage; the matching @babel namespace and Babel monorepo context partially mitigate this concern.

Repo toolingcaution

The repository uses multiple build tools and has an established build system, but no security-scanning tools were detected, leaving a modest security-process hygiene gap.

Token permissionscaution

Most workflows declare read-only permissions, but two lack top-level permissions and one has top-level write access, leaving some permission-hardening gaps.