Allow parsing of '#foo in obj' brand checks
68%
Total Score
100
100
85
88
The package has had only two releases, with the latest published over five years ago and none in the last 12 months. That suggests release abandonment risk, although the linked Babel project remains active.
The linked Babel monorepo neither matches the package name nor mentions it in its README. Although name mismatches are ordinary for monorepo subpackages, the missing README mention leaves package ownership less explicit.
The project uses established build tooling, but no security-scanning tools were detected. This is a modest transparency and hygiene gap, not evidence of abandonment.
The audit analyzed all 13 workflows without failures, but 119 of 120 action uses are unpinned and high-confidence template-injection findings affect release-related workflows. A high-confidence trusted-publishing finding also warrants caution, while the low-confidence cache finding is only hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^7.14.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.