Package Health

@babel/helpers

Collection of helper functions used by Babel transforms.

Latest 8.0.7NPMNPM

78%

Total Score

healthy

Active releases and an organization-backed repository outweigh workflow pinning and package-identification gaps.

Are you affected? Scan for Free

Health Score Breakdown

Repo package mentioncaution

The repository neither matches the package name nor mentions it in the README, which weakens package-to-source transparency; the Babel organization and monorepo context partly compensate for the mismatch.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected; the documented security policy and active maintenance partly compensate, so this is a minor transparency gap.

Workflow auditcaution

All 14 workflows were analyzed with no untrusted checkouts or script-injection counts, but 119 of 188 action uses are unpinned and high-confidence template-injection findings remain in release workflows; these are meaningful workflow-hygiene concerns, while low-confidence findings carry little weight.

Vulnerabilities

TitleVersionsSeverity
CVE-2025-27789
@babel/helpers is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 7.26.10 and 8.0.0-alpha.0 - 8.0.0-alpha.16.
0.0.0 - 7.26.108.0.0-alpha.0 - 8.0.0-alpha.16
Medium

Package versions

Direct Dependencies

DependencyLast ReleaseScore
@babel/types
Version ^8.0.6
—
—
@babel/template
Version ^8.0.0
—
—

Weekly Downloads

Info

Last Published
4 days ago
Created
8 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform