Workaround a Safari bug where rest destructuring with an array literal on the rhs can yield incorrect results
76%
Total Score
100
100
89
100
100
The repository name does not match the package and its README does not mention the package, which leaves some uncertainty about the linkage. The matching @babel namespace and Babel organization backing reduce, but do not remove, that concern.
The project uses established build tooling, but no security scanning tools were detected. The repository's active maintenance and separate security policy partly compensate for this gap.
All 13 workflows were analyzed, but 119 of 120 action references are unpinned, creating avoidable supply-chain drift. High-confidence template-injection findings remain hygiene concerns because the reported pull_request_target workflows have no untrusted checkout or script-injection sink; the low-confidence cache finding is minor.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^8.0.1 | — | — |
@babel/helper-skip-transparent-expression-wrappers Version ^8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.