Allow parsing of class properties
68%
Total Score
100
100
81
83
This package has had no registry release in over five years and none in the last 12 months, which raises version-staleness and abandonment concerns. The active source repository partly offsets that risk, but does not refresh this release.
The repository name does not match this package and its README does not mention it. This is plausible for a monorepo subpackage, but the missing direct reference leaves some uncertainty about package-to-repository correspondence.
The project has established build tooling, but no security-scanning tools were detected. The mature build setup compensates for much of this gap, making it a minor concern rather than a decisive risk.
The audit covered all 13 workflows and found no untrusted checkout or script-injection paths, but 119 of 120 action references are unpinned and high-confidence template-injection findings remain. The low-confidence cache finding is hygiene only; the workflow setup warrants caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^7.12.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.