@babel/plugin-transform-optional-chaining

Dangerous workflowscaution

Two workflows use pull_request_target, which warrants review because that trigger can elevate workflow privileges, but no untrusted checkout or script-injection patterns were detected across the 13 analyzed workflows.

Repo package mentioncaution

The linked repository neither matches the package name nor mentions the package in its README, which creates some uncertainty about package-to-repository traceability. The Babel organization and monorepo context partly mitigate the name mismatch, but the absence of a README mention remains a transparency gap.

Repo toolingcaution

The repository uses multiple build tools and a structured build process, but no security-scanning tools were detected, leaving a hardening gap in the observed repository tooling.

Token permissionscaution

Ten workflows declare read-only permissions, but two lack top-level permissions declarations and one has top-level write permissions, leaving some workflow privilege configuration less explicit than ideal.