babel-plugin-syntax-jsx

Release historycaution

The package has 33 releases but none in the last 12 months, and its latest release was in October 2017. Active repository work partly offsets abandonment risk, but this release is clearly legacy.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention babel-plugin-syntax-jsx. Although a name mismatch is normal for a monorepo, the lack of an explicit package mention leaves some ownership ambiguity.

Repo toolingcaution

The project uses established build tooling, but no security scanning tools were detected. The active project and separate security policy partly compensate for this hygiene gap.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkouts or script-injection sinks, but 119 of 120 action references are unpinned and the audit reported trusted-publishing and high-confidence template-injection findings. These are workflow hygiene concerns rather than proof that this package release is unsafe.