A recommended babel preprocessing plugin for emotion, The Next Generation of CSS-in-JS.
58%
Total Score
67
83
83
The package has 90 releases and historically released about weekly, but its latest registry release was about five years ago and there were no releases in the last 12 months. This is a substantial maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months. This conflicts with the recent push timestamp and still leaves current development activity unproven.
There were eight new pull requests but no merged pull requests and no closed issues in the last month, suggesting limited recent resolution activity.
The repository name does not match the package name and its README does not mention this package. Although a monorepo can explain the name mismatch, the lack of a README reference weakens package ownership transparency.
Both workflows use read-only permissions and the audit found no dangerous triggers, untrusted checkouts, injections, or severity findings. However, all 10 action references are unpinned, leaving the workflow exposed to moving action contents.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.