Turn async generator functions into ES2015 generators
18%
Total Score
100
67
50
The registry marks the entire package as deprecated and says it is no longer maintained because the proposal entered the ECMAScript standard, directing users to @babel/plugin-transform-async-generator-functions.
The package has had no release in more than three years, despite 74 releases overall; this is consistent with the package-level deprecation and confirms that its release line is inactive.
The linked repository is the Babel monorepo, but its name does not match this package and its README does not mention the package, leaving package-to-repository ownership less transparent. The organization backing and active repository provide some context but do not remove the mismatch.
The audit found high-confidence template-injection findings and 119 unpinned action references out of 120; the repository also has a low-confidence cache-poisoning pattern. No untrusted checkout or script-injection sink was reported, limiting this to a hygiene concern rather than the main adoption blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^7.20.2 | — | — |
@babel/helper-environment-visitor Version ^7.18.9 | — | — |
@babel/plugin-syntax-async-generators Version ^7.8.4 | — | — |
@babel/helper-remap-async-to-generator Version ^7.18.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.