StyleX babel plugin.
92%
Total Score
100
100
100
90
50
No build attestation, trusted publisher identity, or staged publishing is present. That limits release transparency, although the repository shows an established build and maintenance process.
Neither analyzed workflow declares top-level token permissions. No workflow requests top-level write access, but the absence of explicit least-privilege declarations is a minor security-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@babel/core Version ^7.26.8 | — | — |
@babel/types Version ^7.26.8 | — | — |
@babel/traverse Version ^7.26.8 | — | — |
@stylexjs/shared Version 0.19.1 | — | — |
@stylexjs/stylex Version 0.19.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.