A babel plugin that adds istanbul instrumentation to ES6 code
68%
Total Score
67
100
75
No commits or active maintainers were recorded in the past three months, a meaningful maintenance concern, although the package has a recent registry release and an organization-owned repository.
There were no new or closed issues or pull requests in the past month, indicating limited current project interaction; the existing 12 open pull requests provide some evidence of ongoing work but do not offset the inactivity fully.
All 7 analyzed action references are unpinned and one workflow grants top-level write permissions, creating avoidable maintenance and supply-chain exposure. The cache-poisoning finding has low confidence, so it is only a hygiene concern rather than a decisive risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
test-exclude Version ^7.0.1 | — | — |
@istanbuljs/schema Version ^0.1.3 | — | — |
istanbul-lib-instrument Version ^6.0.2 | — | — |
@babel/helper-plugin-utils Version ^7.0.0 | — | — |
@istanbuljs/load-nyc-config Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.