Compile trailing function commas to ES5
62%
Total Score
100
100
83
83
The package has had no release in nearly nine years, with the latest release on September 12, 2017, despite a long history of 34 releases. This materially raises compatibility and abandonment concerns for this specific package.
The repository name does not match this package and its README does not mention the package, so the link does not clearly establish package-specific ownership. A monorepo explains the name mismatch but not the missing README mention.
The repository uses established build tooling, but no security-scanning tools were detected. The active project and separate security policy partly offset this hygiene gap.
All 13 workflows were analyzed, with no untrusted checkout or script-injection counts, and most workflows use read-only permissions. However, 119 of 120 action references are unpinned and the audit reports high-confidence template-injection findings plus trusted-publishing usage, so workflow hygiene remains a caution.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.