babel-plugin-syntax-jsx
Allow parsing of jsx
16
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
amasadhzoojmmloganfsmythsebmckthejameskyle
Keywords
babel-plugin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): The sebmck→hzoo transition in 2016 is the well-documented, legitimate handoff of Babel maintainership from its creator to Henry Zhu. Stable for this package. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Babel plugin packages from this era commonly omit descriptions; not a risk signal for this established package. | ai | |
| provenance | no-provenance | AI (provenance): Package predates Sigstore provenance by years; absence of attestation is expected for 2016-era Babel packages. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Minimal syntax plugin is legitimately tiny; inflated semver is false positive for established package with 33 prior versions. | ai | |
| phantom-deps | phantom-dep:babel-runtime | AI (phantom-deps): babel-runtime is expected config/peer dependency for Babel v6 plugins; not a security issue. | ai |