@babel/helper-member-expression-to-functions

Dangerous workflowscaution

Two workflows use pull_request_target, which merits review because that trigger can expose elevated workflow context, but no untrusted checkouts or script-injection patterns were detected across the 13 analyzed workflows.

Repo toolingcaution

The repository uses established build tooling and an explicit build system, though no security-scanning tools were detected; the latter is a modest hygiene gap but not severe given the other controls.

Token permissionscaution

Most workflows declare read-only permissions, but two lack top-level permissions and one declares top-level write access, leaving some workflow permission-hardening gaps.