@babel/helper-builder-react-jsx
Helper function to build react jsx
29
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
hzooexistentialismnicolo-ribaudojlhwung
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher rotation within the Babel core team (nicolo-ribaudo → jlhwung) is routine for the @babel/* monorepo. jlhwung is a known Babel contributor with 5352 approved packages. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): jlhwung is a recognized Babel core team member; addition is consistent with normal Babel org maintainer rotation. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): developit removal is part of routine Babel org maintainer rotation; no evidence of hostile takeover. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Babel monorepo intentionally publishes many templated packages; mass-production and no-keywords signals are stable false positives for the entire @babel/* namespace. | ai | |
| provenance | missing-githead | AI (provenance): Trusted Babel maintainer (nicolo-ribaudo); missing gitHead reflects a CI/publish environment change, not a supply chain compromise. No other risk signals present. | ai |
Versions (showing 29 of 29)
| Version | Deps | Published |
|---|---|---|
| 8.0.1 | 1 / 2 | |
| 8.0.0 | 1 / 2 | |
| 7.29.7 | 2 / 2 | |
| 7.28.6 | 2 / 2 | |
| 7.27.1 | 2 / 2 | |
| 7.25.9 | 2 / 2 | |
| 7.25.7 | 2 / 2 | |
| 7.24.7 | 2 / 2 | |
| 7.24.6 | 2 / 2 | |
| 7.22.10 | 2 / 2 | |
| 7.22.5 | 2 / 2 | |
| 7.19.0 | 2 / 2 | |
| 7.18.6 | 2 / 1 | |
| 7.16.7 | 2 / 1 | |
| 7.16.5 | 2 / 1 | |
| 7.16.0 | 2 / 0 | |
| 7.15.4 | 2 / 0 | |
| 7.14.5 | 2 / 0 | |
| 7.12.13 | 2 / 0 | |
| 7.10.4 | 2 / 0 | |
| 7.10.3 | 2 / 0 | |
| 7.10.1 | 2 / 0 | |
| 7.9.0 | 2 / 0 | |
| 7.8.3 | 2 / 0 | |
| 7.8.0 | 2 / 0 | |
| 7.7.4 | 2 / 0 | |
| 7.7.0 | 2 / 0 | |
| 7.3.0 | 2 / 0 | |
| 7.0.0 | 2 / 0 |
v8.0.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.