Compile class public and private fields, private methods and decorators to ES6
82%
Total Score
healthy
Active Babel maintenance supports this release, but workflow audit findings and weak package-to-repository identification add supply-chain concerns.
The linked repository is the Babel monorepo rather than a name match, but it does not mention this package in its README; that weakens direct package-to-source identification, even though the monorepo structure makes a name mismatch ordinary.
The project uses established build tools, but no security scanning tools were detected; the repository's other security evidence partly compensates for that gap.
All 14 workflows were analyzed with no untrusted checkouts or script-injection findings, and most use read-only permissions. However, 119 of 188 action references are unpinned, and high-confidence template-injection findings plus trusted-publishing usage warrant caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
verkit Version ^0.5.0 | — | — |
@babel/traverse Version ^8.0.7 | — | — |
@babel/helper-replace-supers Version ^8.0.1 | — | — |
@babel/helper-annotate-as-pure Version ^8.0.0 | — | — |
@babel/helper-optimise-call-expression Version ^8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.