@babel/plugin-transform-unicode-sets-regex

Repo package mentioncaution

The repository name differs from the package name and its README does not mention this package, which creates some uncertainty about package-to-repository attribution. The organization-owned Babel monorepo context partly offsets that concern.

Workflow auditcaution

All 13 workflows were analyzed, with no untrusted checkouts or script-injection counts, but 119 of 120 action references are unpinned and the audit reports high-confidence template-injection findings. These are meaningful workflow-hygiene concerns, though the affected trigger and sink paths are not shown to coincide.