npm / react-is / 0.0.0-experimental-a6b912fb-20261023

react-is 0.0.0-experimental-a6b912fb-20261023

Source

https://github.com/react/react

Artifact scanned

react-is-0.0.0-experimental-a6b912fb-20261023.tgz (npm tarball · 3.1 KB · SHA-256 017d351560f4…)

Compared with

react-is-0.0.0-experimental-a6792708-20261019.tgz (0 signals introduced since)

Files

5 scanned, 1 skipped (binary, oversized, or unrecognised)

Signals

0 critical · 0 warn · 0 info

Scan time

0.1 s

LLM review

LLM review by claude-haiku-5-5 (Anthropic): nothing at warn or critical to review.

Disclude version

4.3.0

Scanned (UTC)

2026-10-23 22:42

Signals

No signals flagged.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o react-is-0.0.0-experimental-a6b912fb-20261023.tgz https://registry.npmjs.org/react-is/-/react-is-0.0.0-experimental-a6b912fb-20261023.tgz
printf '%s  %s\n' 017d351560f43043b470dc8b0b7e69a4284be2961b2aa21cc967bfe207c034f1 react-is-0.0.0-experimental-a6b912fb-20261023.tgz | shasum -a 256 -c -
mkdir pkg && tar -xzf react-is-0.0.0-experimental-a6b912fb-20261023.tgz -C pkg --strip-components 1
disclude scan --untrusted --severity info pkg