Babel preset for all React plugins.
82%
Total Score
100
100
93
83
100
The repository name does not match the package and its README does not mention @babel/preset-react, which is a transparency caution, though the organization-backed Babel monorepo context partly explains the mismatch.
The audit found 119 of 120 action references unpinned, plus high-confidence template-injection findings and a trusted-publishing finding. No untrusted checkout or script-injection sink was found, so these are workflow-hygiene concerns rather than a standalone severe health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^8.0.1 | — | — |
@babel/helper-validator-option Version ^8.0.0 | — | — |
@babel/plugin-transform-react-jsx Version ^8.0.1 | — | — |
@babel/plugin-transform-react-display-name Version ^8.0.1 | — | — |
@babel/plugin-transform-react-jsx-development Version ^8.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.