This plugin transforms ES2015 modules to SystemJS
63%
Total Score
100
100
88
83
The package has 46 releases but none in the last 12 months, and its latest release was in October 2017. That is a meaningful freshness and abandonment concern for this specific release.
The repository name does not match the package and its README does not mention it, which makes package ownership less transparent. The organization-backed Babel monorepo context reduces, but does not eliminate, that concern.
All 13 workflows were analyzed, but 119 of 120 action references are unpinned. The audit also found high-confidence template-injection findings and a trusted-publishing concern; the low-confidence cache warning is only a hygiene issue.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
babel-runtime Version ^6.22.0 | — | — |
babel-template Version ^6.24.1 | — | — |
babel-helper-hoist-variables Version ^6.24.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.