The legacy ESLintRC config file format for ESLint
86%
Total Score
100
100
94
75
100
A prepare script runs during installation, adding build-time behavior to dependency installation, but this is common for packages that publish built artifacts and is not independently severe.
The project uses established build tooling, but no security-scanning tools were detected, leaving a modest repository hygiene gap.
All six workflows were analyzed with no untrusted checkout or script-injection findings, but all 13 action references are unpinned and the audit found high-confidence adhoc package installation; the low-confidence cache finding is only hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ajv Version ^6.14.0 | — | — |
debug Version ^4.3.2 | — | — |
espree Version ^10.0.1 | — | — |
ignore Version ^5.2.0 | — | — |
globals Version ^14.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.