Internationalize JS apps. This library provides an API to format dates, numbers, and strings, including pluralization and handling translations.
82%
Total Score
healthy
Frequent releases and active project backing outweigh workflow pinning and audit gaps.
The project uses established build tooling, but the collected signal reports no security-scanning tools, leaving a modest transparency gap.
No repository security policy was found, which weakens vulnerability-reporting transparency despite the repository's otherwise active maintenance.
All 13 workflows were analyzed without file failures and had no untrusted checkouts or script injections, but 76 of 79 action references are unpinned and the audit found high-confidence template-injection issues plus medium-confidence bot-condition issues. These are workflow hygiene and supply-chain concerns, but no dangerous trigger or untrusted sink was reported to make them a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
intl-messageformat Version 12.1.3 | — | — |
@formatjs/fast-memoize Version 3.1.7 | — | — |
@formatjs/icu-messageformat-parser Version 3.5.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.