This plugin transforms ES2015 modules to AMD
61%
Total Score
100
100
75
75
The package has had no registry release in over eight years, despite 39 releases before that. This substantially raises version-staleness and abandonment concerns for the specific release.
The linked repository name does not match this package and its README does not mention it, so the package-to-repository association is not directly transparent. The organization-owned Babel monorepo context makes a sub-package explanation plausible but does not remove the gap.
The audit covered all 13 workflows and found no untrusted checkouts or script injection, but 119 of 120 action references are unpinned and it reported high-confidence template-injection findings plus trusted-publishing usage. These are meaningful workflow supply-chain hygiene concerns, while the low-confidence cache finding is not decisive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
babel-runtime Version ^6.22.0 | — | — |
babel-template Version ^6.24.1 | — | — |
babel-plugin-transform-es2015-modules-commonjs Version ^6.24.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.