Turn JSX into React function calls in development
79%
Total Score
100
100
90
88
100
The repository name differs from the package name, which is normal for a monorepo, but the README also does not mention this package; that weakens confidence that the linked repository directly documents it.
The repository uses established build tooling and has reproducible project tooling, but no security-scanning tools were detected; the security policy partly offsets this hygiene gap.
The audit analyzed all 13 workflows and found no untrusted checkouts or script injection, but 119 of 120 action references are unpinned, creating avoidable build-integrity risk. High-confidence template-injection findings remain workflow hygiene concerns, while the low-confidence cache finding carries limited weight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/plugin-transform-react-jsx Version ^8.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.