@babel/plugin-syntax-export-default-from

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating a package-ownership transparency concern; the organization-backed Babel monorepo partly explains the mismatch.

Workflow auditcaution

All 13 workflows were analyzed, but 119 of 120 action references are unpinned, which weakens build reproducibility. High-confidence template-injection findings and trusted-publishing usage warrant hygiene attention, while no untrusted checkout or script-injection sink was observed.