Compile ESNext Regular Expressions to ES5
78%
Total Score
healthy
Active Babel maintenance is offset by high-confidence workflow findings and 119 of 188 actions being unpinned.
The linked repository name does not match the package and its README does not mention the package, creating some uncertainty about package-to-repository mapping; the organization-owned monorepo context partly offsets this.
All 14 workflows were analyzed, but 119 of 188 action uses are unpinned and high-confidence template-injection findings appear in release-related workflows. The pull_request_target triggers have no untrusted checkouts or script injections, limiting the overall impact to caution rather than danger.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
verkit Version ^0.5.0 | — | — |
regexpu-core Version ^6.5.3 | — | — |
@babel/helper-annotate-as-pure Version ^8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.