Wraps classes defined in computed keys of other classes affected by https://bugzilla.mozilla.org/show_bug.cgi?id=1887677
68%
Total Score
100
100
94
83
100
The repository is an organization-owned monorepo, so the name mismatch is ordinary; however, its README does not mention this package, leaving some uncertainty about package-to-repository association.
All 120 analyzed action references except one are unpinned, and high-confidence template-injection findings appear in release-related workflows; the audit also reports trusted publishing and a low-confidence cache concern. No untrusted checkout or script-injection sink was found, so this is a meaningful hygiene and supply-chain caution rather than a standalone critical risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^8.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.