This plugin transforms static class properties as well as properties declared with the property initializer syntax
15%
Total Score
100
60
50
The package is deprecated at package scope because the proposal became part of ECMAScript, and npm explicitly says it is no longer maintained. The stated replacement is @babel/plugin-transform-class-properties, making this release unfit for a new dependency.
The package has 65 releases but none in the last 12 months, with the latest release on April 4, 2023. This is consistent with the deprecation and adds abandonment risk for this package.
All 13 workflows were analyzed, but 119 of 120 action references are unpinned, and the audit reports high-confidence template-injection findings plus a trusted-publishing finding. No untrusted checkout or script-injection sink was found, so this is a hygiene and release-process caution rather than the main verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^7.18.6 | — | — |
@babel/helper-create-class-features-plugin Version ^7.18.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.