Traverse Babel AST with scope information.
82%
Total Score
75
93
67
100
One contributor made all 4 commits in the last 3 months, leaving maintenance highly dependent on a single person.
The repository has no SECURITY.md or other security policy, leaving vulnerability-reporting expectations undocumented.
Version 0.10.0 is not yet at a stable major version, so consumers may face more API change than with a 1.x release, although it is not a prerelease.
All 3 workflows were analyzed with no audit findings or untrusted checkout and script-injection patterns. However, all 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10487 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. ast-walker-scope is vulnerable to Prototype Pollution in versions 0.0.1 - 0.8.3. | 0.0.1 - 0.8.3 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
ast-kit Version ^3.0.0 | — | — |
@babel/types Version ^8.0.0 | — | — |
@babel/parser Version ^8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.