With the transition of webpack-contrib to unify the organization (https://github.com/orgs/webpack/discussions/19548), those packages are not in the scope. I think we should add them to the group’s scope.
ref: https://github.com/webpack/security-wg/blob/main/docs/packages-in-scope.md