@babel/plugin-transform-react-jsx-source

Repo package mentioncaution

The repository name differs from this package, which is normal for a monorepo, but its README does not mention the package; that leaves some uncertainty about the package-to-repository mapping.

Repo toolingcaution

The project uses established build tooling, but the collected tooling signal reports no security-scanning tools. The repository's security policy and active maintenance partly offset this hygiene gap.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script injections, but 119 of 120 action uses are unpinned and the audit flags high-confidence template-injection patterns plus long-lived-token publishing. The low-confidence cache finding is only a minor hygiene concern.