Generate an AST from a string template.
62%
Total Score
100
50
86
83
Five runtime dependencies, including Babel components and lodash, make this package dependent on a nontrivial legacy dependency chain, but the profile is not unusually large.
The package has had no registry release in more than eight years, despite 46 releases historically; this creates meaningful staleness risk for a dependency fixed at version 6.26.0.
The linked Babel repository neither matches the package name nor mentions babel-template in its README, so the package-to-repository relationship is not clearly demonstrated; this may be normal for a monorepo subpackage but remains a transparency concern.
The audit found 119 of 120 action references unpinned, plus high-confidence template-injection findings and trusted-publishing usage; the template findings are hygiene concerns, while the publishing setup warrants caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lodash Version ^4.17.4 | — | — |
babylon Version ^6.18.0 | — | — |
babel-types Version ^6.26.0 | — | — |
babel-runtime Version ^6.26.0 | — | — |
babel-traverse Version ^6.26.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.