Module resolver plugin for Babel
42%
Total Score
50
86
50
The package is flagged as borrowing the identity of babel-plugin-polyfill-regenerator, with borrows_lookalike_identity true. Although artifact overlap is 0.0 and the README does not identify it as that package, this remains a severe identity concern.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This conflicts with the recent registry release and raises concern about ongoing maintenance capacity.
There were 0 new or closed issues and 0 merged pull requests in the last month, alongside 102 open issues and 7 open pull requests. This suggests limited recent issue follow-through.
The linked repository has no security policy and no reported security-scanning tool. This reduces transparency around vulnerability reporting and detection.
All 3 analyzed action references are unpinned, which weakens reproducibility, though the audit found no untrusted checkout, script injection, dangerous trigger, or high-severity finding.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
glob Version ^9.3.3 | — | — |
pkg-up Version ^3.1.0 | — | — |
resolve Version ^1.22.8 | — | — |
reselect Version ^4.1.7 | — | — |
find-babel-config Version ^2.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.