@babel/plugin-transform-export-namespace-from

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, which creates a package-ownership transparency concern. The matching @babel namespace and Babel organization backing make a monorepo subpackage explanation plausible, so this is only a caution.

Workflow auditcaution

All 13 workflows were analyzed, with no untrusted checkouts or script-injection findings, and most workflows use read-only permissions. However, 119 of 120 action references are unpinned, and the audit reported a high-confidence trusted-publishing finding; these are workflow hygiene concerns.