Official React package with standard files only; no static findings or malicious behavior present.
AI breakdown
Plain-English summary of what this package does and how it behaves.
React is a JavaScript library for building user interfaces. The package distributes core modules, JSX runtimes, and multiple build variants (development, production, react-server) via index.js and related files with no dependencies.
Capabilities
- Provides JSX runtime modules
- Includes development/production/react-server build variants
- No postinstall or lifecycle scripts present
Data access
- None observed
Network
- No network access observed
Official React package with zero dependencies and no scripts; standard library usage carries typical supply-chain trust considerations but no additional observed behaviors.
Package metadata
React is a JavaScript library for building user interfaces.
Files in package (54)
How ShadowCanopy checks npm packages
ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.
This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/npm/react