Findings the reviewer chose to accept rather than block on.
Source
Rule
Reason
Accepted by
When
phantom-deps
phantom-dep:lodash.isequal
AI (phantom-deps): Legitimate build dependency used in codebase; phantom-dep pattern is normal for utility libraries.
ai
phantom-deps
phantom-dep:@babel/preset-typescript
AI (phantom-deps): Framework-scoped Babel plugin loaded by convention; standard pattern for build tooling.
ai
phantom-deps
phantom-dep:@babel/plugin-transform-object-assign
AI (phantom-deps): Framework-scoped Babel plugin loaded by convention; standard pattern for build tooling.
ai
semgrep
semgrep:eval-usage
AI (semgrep): eval() is used intentionally to execute serialized worklet functions generated by Reanimated's own Babel plugin at build time. This is a documented, core design pattern of the library, not a supply-chain risk.
AI (phantom-deps): Same as above — Babel plugin loaded by convention, not direct import.
ai
phantom-deps
phantom-dep:@babel/plugin-transform-classes
AI (phantom-deps): Babel plugins are loaded by convention through the Babel plugin system, not via direct imports. This is expected for a library that ships a Babel transform.
ai
phantom-deps
phantom-dep:@babel/plugin-transform-unicode-regex
AI (phantom-deps): Same as above — Babel plugin loaded by convention, not direct import.