Low-level Lingui utilities to compile ICU MessageFormat messages and generate stable message IDs
86%
Total Score
healthy
Active, well-supported internal utility with strong release evidence, but its CI workflows have notable security-hygiene findings.
All 10 workflows were analyzed with no failed files, all 26 action references are pinned, and untrusted checkouts are absent. High-confidence template-injection findings in release and version-bump workflows, inherited secrets in release.yml, and ad hoc package installs add CI hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
js-sha256 Version ^0.10.1 | — | — |
@messageformat/parser Version ^5.0.0 | — | — |
@messageformat/date-skeleton Version ^1.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.