@babel/plugin-transform-unicode-escapes

Dangerous workflowscaution

Two workflows use pull_request_target, which deserves review because that trigger can elevate workflow privileges, but no untrusted checkouts or script-injection patterns were detected across the analyzed workflows.

Repo package mentioncaution

The repository neither matches the package name nor mentions it in the README, which is a transparency caution; however, the package belongs to the matching @babel namespace and the repository is Babel's organization monorepo, making this pattern understandable.

Token permissionscaution

Most workflows use read-only permissions, though two omit top-level permissions and one declares top-level write access; this is a modest workflow-hygiene concern rather than evidence of package abandonment.