@babel/plugin-transform-dynamic-import

Repo package mentioncaution

The repository neither matches the package name nor mentions it in its README, which creates identification ambiguity; the Babel organization backing and monorepo structure partly compensate, but do not remove the transparency concern.

Repo toolingcaution

The project uses established build tooling and has a structured build process; the absence of reported security-scanning tools is a minor transparency gap, but SECURITY.md and active maintenance partly compensate.

Workflow auditcaution

The audit covered all 13 workflows with no untrusted checkout or script-injection counts, but 119 of 120 action references are unpinned. High-confidence template-injection findings and the trusted-publishing finding warrant workflow hygiene attention, while the low-confidence cache finding is limited evidence.