@babel/plugin-transform-explicit-resource-management

Dangerous workflowscaution

Two of 13 workflows use pull_request_target, which warrants review because that trigger can increase workflow privilege exposure; no untrusted checkouts or script-injection patterns were detected, limiting the concern.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, which creates a package-to-repository identification gap; the Babel organization and monorepo context reduce but do not eliminate that concern.

Repo toolingcaution

The repository uses substantial build tooling, but no security-scanning tools were detected; this is a modest security-process transparency gap rather than evidence of abandonment.

Token permissionscaution

Ten workflows declare read-only permissions, but two omit top-level permissions and one declares top-level write access, leaving some least-privilege configuration concerns.