ESLint plugin about ECMAScript syntactic features.
84%
Total Score
healthy
Regular releases and fresh repository activity support this package; one recent contributor and unpinned workflow actions are the main reservations.
All 3 recent commits came from one contributor, creating concentration risk. Organization ownership provides some ability to hand maintenance to another contributor, but no second recent contributor is shown.
The repository recorded 3 commits in the last 3 months, showing recent activity, but only one active maintainer contributed during that period.
All 5 workflows were analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths. However, all 16 action references are unpinned, and two workflows install packages outside a lockfile; these are low-level supply-chain hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
eslint-type-tracer Version ^0.5.1 | — | — |
@eslint-community/regexpp Version ^4.12.1 | — | — |
@eslint-community/eslint-utils Version ^4.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.