Helper function to call delegate
53%
Total Score
100
50
50
The package has had no releases in the last 12 months, and version 6.24.1 was published in October 2017. This is a substantial freshness and abandonment concern, although the linked Babel repository remains actively maintained.
The linked repository is Babel's monorepo, but its name does not match this package and the README does not mention it. That leaves some uncertainty about how directly this repository supports the published package.
The audit found 119 unpinned action references out of 120, which weakens build reproducibility. The high-confidence template-injection findings are not shown to overlap with the pull_request_target workflows, so they remain hygiene concerns rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
babel-types Version ^6.24.1 | — | — |
babel-runtime Version ^6.22.0 | — | — |
babel-traverse Version ^6.24.1 | — | — |
babel-helper-hoist-variables Version ^6.24.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.