ESLint React's TSESTree AST utility module.
84%
Total Score
healthy
Active maintenance, provenance, and strong workflow controls outweigh the package’s concentrated ownership and unclear repository linkage.
Only one registry account has publish access, which creates publishing concentration, although repository activity shows a broader active contributor set.
The repository is owned by an individual rather than an organization, so the highly concentrated commit activity is not offset by visible organizational handoff capacity.
Rel1cx made 291 of 302 recent commits, or 97%, while the other eight contributors made only one or two each; this is a meaningful continuity risk.
The repository name does not match @eslint-react/ast and its README does not mention the package, so the linkage is not explicit; this may be a monorepo subpackage, but the signal remains a transparency concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@typescript-eslint/types Version ^8.71.2 | — | — |
@typescript-eslint/utils Version ^8.71.2 | — | — |
@typescript-eslint/typescript-estree Version ^8.71.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.