metro-babel-transformer

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. Although this could reflect a monorepo subpackage, the missing reference makes package-to-repository ownership less transparent.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations less clear despite the otherwise active maintenance signals.

Token permissionscaution

Three workflows declare read-only permissions, while one workflow has no top-level permissions declaration. No workflow declares top-level write access, so this is a minor configuration gap rather than a severe workflow risk.