babel's modular runtime helpers with core-js@3 polyfilling
88%
Total Score
healthy
Active Babel maintenance and strong release provenance outweigh workflow hygiene concerns, including many unpinned actions.
The repository uses established build tools, but the collected tooling signal reports no security-scanning tools. The separate security policy and workflow audit provide some compensating project hygiene.
All 14 workflows were analyzed with no untrusted checkouts or script-injection findings, and most use read-only or job-level permissions. However, 119 of 188 action references are unpinned, and the audit identifies high-confidence template-injection findings plus trusted-publishing usage; these are meaningful workflow hygiene and publishing concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
core-js-pure Version ^3.48.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.