This plugin places a 'use strict'; directive at the top of all files to enable strict mode
58%
Total Score
100
67
50
The package has 39 releases but none in the last 12 months, and its latest release was published in October 2017. Active repository work partly offsets abandonment concerns, but does not show that this release is still maintained.
The repository name does not match this package and its README does not mention the package. Although a name mismatch can be normal for a monorepo sub-package, the absence of any README mention makes package ownership and maintenance linkage less transparent.
All 120 analyzed action references except one are unpinned, and the audit reports high-confidence template-injection findings plus a trusted-publishing concern. No untrusted checkout or script-injection path was found, limiting this to a hygiene and supply-chain caution rather than a severe workflow risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
babel-types Version ^6.24.1 | — | — |
babel-runtime Version ^6.22.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.