babel require hook
78%
Total Score
100
94
83
100
The repository name differs from the package name and its README does not mention @babel/register, so the package-to-repository relationship is less transparent; the organizational monorepo context partly explains the mismatch.
All 13 workflows were analyzed with no untrusted checkout or script-injection sinks, and most use read-only or job-level permissions. However, 119 of 120 action references are unpinned, and the audit reports high-confidence template-injection findings plus trusted-publishing usage, creating a meaningful workflow-hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cacache Version 20.0.3 | — | — |
pirates Version ^4.0.6 | — | — |
empathic Version ^2.0.1 | — | — |
clone-deep Version ^4.0.1 | — | — |
@cspotcode/source-map-support Version ^0.8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.