@babel/plugin-transform-duplicate-keys

Repo package mentioncaution

The linked repository is the Babel monorepo, so a name mismatch alone is normal for a subpackage; however, it neither matches the package name nor mentions it in the README, leaving some uncertainty that this repository is the package's direct source.

Workflow auditcaution

The audit analyzed all 13 workflows and found no untrusted checkouts or script injections, but 119 of 120 action references are unpinned, weakening build reproducibility. High-confidence template-injection findings and a trusted-publishing finding also warrant workflow review, although the reported trigger paths do not show an untrusted checkout sink.