@babel/core
Babel compiler core.
82%
Total Score
healthy
Active releases and a well-supported repository outweigh workflow hygiene concerns, including many unpinned actions and high-confidence template-injection findi
Health Score Breakdown
The project uses established build tooling, but no security-scanning tools were detected. Its separate security policy provides some transparency, though this remains a modest hygiene gap.
All 14 workflows were analyzed with no untrusted checkouts or script-injection findings, but 119 of 188 action references are unpinned. High-confidence template-injection findings and use of long-lived-token publishing add workflow hygiene concerns, while low-confidence findings are limited.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-49356 @babel/core is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 8.0.0-alpha.0 - 8.0.0-rc.5 and 0.0.0 - 7.29.0. | 0.0.0 - 7.29.08.0.0-alpha.0 - 8.0.0-rc.5 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 obug Version ^3.0.0 | — | — |
json5 Version ^2.2.3 | — | — |
verkit Version ^0.5.0 | — | — |
gensync Version ^1.0.0-beta.2 | — | — |
empathic Version ^2.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 8 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.