Diagnosing React code

react-doctor scans a React package and prints a 0-100 score plus diagnostics for security, performance, correctness, and architecture. It needs Node ^20.19.0 || >=22.13.0.

Before the first run

• The first run in a session downloads and executes a third-party package from npm. Ask the user before it, naming the pinned version.
• By default the score comes from the react-doctor score API and the supply-chain scan queries Socket.dev; when the user wants nothing sent off the machine, add --no-score --no-supply-chain (the run then reports no score).

Run

Run inside the package whose package.json lists react in dependencies or peerDependencies; at a monorepo root the tool prompts for a project.