@swc/core
Super-fast alternative for babel
94%
Total Score
healthy
Frequent releases, active maintainers, and strong repository controls outweigh minor workflow hygiene findings.
Health Score Breakdown
A postinstall script runs during installation, which adds install-time behavior and some operational risk, though this is consistent with a native addon package.
All 16 workflows were analyzed, all use read-only permissions, and all 128 action references are pinned. Medium-confidence template-injection findings and high-confidence adhoc package installs are workflow hygiene concerns, but no untrusted checkout, script injection, high-severity, or broad-token issue was found.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-193864 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @swc/core is vulnerable to Denial of Service (DoS) in versions 1.0.11 - 1.15.47. | 1.0.11 - 1.15.47 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @swc/types Version ^0.1.28 | — | — |
@swc/counter Version ^0.1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 7 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.