Compile ES2015 block scoping (const and let) to ES5
79%
Total Score
healthy
Active Babel maintenance and provenance outweigh workflow weaknesses, but many actions are unpinned and release workflows need attention.
The repository name does not match the package and its README does not mention it. This is a caution because the package's relationship to the monorepo is not explicit in the collected README evidence, although the organization and namespace do match.
The project uses established build tooling, but the collected signal reports no security scanning tools. The active repository and security policy partly compensate for that gap.
All 14 workflows were analyzed with no untrusted checkouts or script-injection counts, and 11 use read-only permissions. However, 119 of 188 action references are unpinned, high-confidence template-injection findings affect release workflows, and trusted-publishing usage was flagged; these are meaningful automation hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^8.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.