Remove numeric separators from Decimal, Binary, Hex and Octal literals
18%
Total Score
100
67
75
The package is deprecated at package scope because the proposal is now part of ECMAScript, and npm directs users to @babel/plugin-transform-numeric-separator. This makes the assessed release unfit for a new dependency despite healthy repository activity.
The package has 56 releases since October 2017 but no releases in the last 12 months, consistent with its stated end-of-life status rather than active package maintenance.
The linked repository name does not match the package and its README does not mention the package, which is a caution under this signal. The Babel organization backing and monorepo structure provide some context but do not remove the mismatch entirely.
All 13 workflows were analyzed with no untrusted checkout or script-injection findings, but 119 of 120 action references are unpinned and the audit reports high-confidence template-injection findings. These are meaningful workflow hygiene concerns, though they do not outweigh the package's explicit deprecation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^7.18.6 | — | — |
@babel/plugin-syntax-numeric-separator Version ^7.10.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.