@babel/plugin-transform-react-jsx-source MIT 29 versions

@babel/plugin-transform-react-jsx-source

npm Repository Homepage

Add a __source prop to all JSX Elements

Versions

MIT

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

hzooexistentialismnicolo-ribaudojlhwung

babel-plugin

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): nicolo-ribaudo is a well-known Babel core team member; the hzoo→nicolo-ribaudo transition is a documented legitimate maintainer change within the Babel org.	ai	2026/04/24
maintainer-change	maintainer-added	AI (maintainer-change): nicolo-ribaudo is a long-standing Babel core contributor; addition is a legitimate team transition, not a takeover.	ai	2026/04/24
maintainer-change	maintainer-removed	AI (maintainer-change): Removal of xtuc is part of the same legitimate Babel team transition; no evidence of compromise.	ai	2026/04/24
phantom-deps	phantom-dep:@babel/plugin-syntax-jsx	AI (phantom-deps): @babel/plugin-syntax-jsx is a declared runtime dep loaded by Babel plugin convention, not via direct import; this is expected for Babel plugins.	ai	2026/04/24
provenance	missing-githead	AI (provenance): Babel monorepo publish pipeline variation; nicolo-ribaudo is a trusted long-standing publisher with no other risk signals. Not a meaningful security indicator for this package.	ai	2026/04/24
provenance	no-provenance	AI (provenance): Sigstore provenance was not yet standard practice at this version's publish date (2021). No security risk implied for this well-established @babel package.	ai	2026/04/24

Show 1 prerelease