Seamless integration between Rollup and Babel.
62%
Total Score
caution
Usable with caveats: repository commit activity is absent for the last 3 months.
The repository recorded zero commits and zero active maintainers in the last 3 months. Despite recent publishing activity, this weakens evidence of ongoing development and raises maintenance risk.
There is still an open issue and pull request queue, but no issues were closed and no pull requests were merged in the last month. This supports a mild concern about project responsiveness.
The repository name does not match the package and its README does not mention the package. Although a monorepo mismatch is ordinary, the lack of a package mention leaves some uncertainty that this repository is the intended source.
The repository uses build tooling, but no security scanning tools were detected. That is a hygiene gap, partially offset by the repository's established build setup and provenance attestation.
No repository security policy was found. This reduces transparency about vulnerability reporting and handling, although it does not by itself show abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
workerpool Version ^9.0.0 | — | — |
@rollup/pluginutils Version ^5.0.1 | — | — |
@babel/helper-module-imports Version ^7.18.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.