Package Health

@lingo.dev/_compiler

Lingo.dev Compiler

Latest 0.12.15NPMNPM

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Health Score Breakdown

Package scaffoldingdanger

The package README explicitly calls @lingo.dev/_compiler deprecated and directs users to migrate to @lingo.dev/compiler, making this release a poor long-term dependency despite repository tests, changelog, and release support.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, which makes package-specific ownership and maintenance less transparent. The broader organization repository and active project provide some context but do not remove the gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is secondary to the package's explicit deprecation.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-10327 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
@lingo.dev/_compiler is vulnerable to Information Disclosure in versions 0.0.1 - 0.11.3.
0.0.1 - 0.11.3
Low

Package versions

Direct Dependencies

DependencyLast ReleaseScore
ai
Version 6.0.280
—
—
ini
Version 5.0.0
—
—
zod
Version 4.4.3
—
—
dedent
Version 1.7.0
—
—
dotenv
Version 16.4.5
—
—

Weekly Downloads

Info

Last Published
28 days ago
Created
1 year ago
Unpacked Size
0.3 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform