Compile ES2015 block scoping (const and let) to ES5
68%
Total Score
100
81
83
The package has 51 releases but none in the last 12 months, and its latest registry release was in October 2017. The linked project remains active, which reduces abandonment concern for the broader codebase but does not refresh this release.
The linked Babel monorepo neither matches this package name nor mentions it in its README, making package-to-repository ownership less explicit. This is a caution for transparency, although the organization backing and package scaffolding provide supporting context.
The repository uses established build tooling, but no security-scanning tools were detected. The security policy and active project backing partly compensate for that tooling gap.
All 13 workflows were analyzed, with no untrusted checkouts or script-injection findings, but 119 of 120 action references are unpinned. High-confidence template-injection findings are separate from the pull-request-target workflows, while the low-confidence cache finding is hygiene-level.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lodash Version ^4.17.4 | — | — |
babel-types Version ^6.26.0 | — | — |
babel-runtime Version ^6.26.0 | — | — |
babel-template Version ^6.26.0 | — | — |
babel-traverse Version ^6.26.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.