Compile ES2015 sticky regex to an ES5 RegExp constructor
66%
Total Score
100
80
83
The package has had no registry release in nearly nine years, which is a real freshness concern; its long history and stable version partly reduce abandonment risk but do not restore current release confidence.
The linked Babel repository neither matches the package name nor mentions it in the README, so the package-to-source connection is not transparent. The organization-owned repository and active project provide some context but do not remove this mismatch.
The audit analyzed all 13 workflows, but 119 of 120 action references are unpinned and it found high-confidence template-injection patterns plus trusted-publishing usage. No untrusted checkout or script-injection sink was found, so this is a hygiene and workflow-risk caution rather than a severe standalone verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
babel-types Version ^6.24.1 | — | — |
babel-runtime Version ^6.22.0 | — | — |
babel-helper-regex Version ^6.24.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.