Babel preset for all Flow plugins.
72%
Total Score
caution
Usable with caveats: active Babel maintenance offsets weak workflow pinning and release-workflow concerns.
The repository name does not match the package and its README does not mention this package, so the package-to-repository relationship is less transparent despite the shared Babel organization.
The repository uses established build tooling, but no security-scanning tools were detected, leaving a modest process gap.
The audit found 119 of 120 action references unpinned and high-confidence template-injection findings, plus a trusted-publishing warning; no untrusted checkout or script-injection sink was found, limiting the severity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/helper-plugin-utils Version ^8.0.1 | — | — |
@babel/helper-validator-option Version ^8.0.0 | — | — |
@babel/plugin-transform-flow-strip-types Version ^8.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.