@babel/plugin-syntax-jsx

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tool was detected. The missing scanner is a modest hygiene gap rather than evidence of abandonment.

Workflow auditcaution

The audit covered all 13 workflows with no untrusted checkout or script-injection sink, but 119 of 120 action references are unpinned. It also reports high-confidence template-injection findings and a high-confidence trusted-publishing concern; these warrant workflow review despite the low-confidence cache finding.