@babel/plugin-transform-react-jsx

Repo package mentioncaution

The linked repository is a monorepo and does not match or mention this package in its README. Although a name mismatch alone is normal for a monorepo, the absence of a package mention leaves some uncertainty about the linkage.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

The audit analyzed all 13 workflows and found no untrusted checkout or script-injection sink, while most workflows use read-only or job-level permissions. However, 119 of 120 action references are unpinned, and high-confidence template-injection findings plus trusted publishing and cache concerns warrant workflow hygiene caution.