Types for the TypeScript-ESTree AST spec
88%
Total Score
healthy
Frequent releases, active project backing, and attested publishing outweigh minor workflow and monorepo-identity concerns.
The repository name does not match this subpackage and its README does not mention the package, which is a caution under the repository-identity rule. The package README explicitly identifies it as an internal package in the typescript-eslint monorepo, partly explaining the mismatch.
All 15 workflows were analyzed with no untrusted checkouts or script injection, all 37 action references are pinned, and 13 workflows use read-only permissions. Two high-confidence low-severity adhoc-package findings in the release workflow are a minor hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.