@babel/plugin-transform-runtime

Repo package mentioncaution

The linked repository is an organization monorepo, so its name not matching the package is normal; however, it also does not mention this package in its README, leaving package ownership less explicit.

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected. The repository's security policy provides some governance coverage, so this is a minor hygiene gap.

Workflow auditcaution

The audit analyzed all 13 workflows with no failed files and found no untrusted checkout or script-injection sinks. However, 119 of 120 action references are unpinned, and the high-confidence trusted-publishing finding warrants workflow hygiene attention.