@babel/runtime-corejs2

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the linkage is less transparent. The Babel organization backing and monorepo layout partly explain this, but the package relationship is still worth verifying.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script-injection findings, and most workflows use read-only or job-level permissions. However, 119 of 120 action references are unpinned, and high-confidence template-injection findings remain workflow hygiene concerns.