po2js and js2po and i18next2po and po2i18next converter gettext resource utils
82%
Total Score
80
100
90
100
50
No build attestation, trusted publisher identity, or staged publishing is present, leaving the release-to-source build path less transparent.
All 4 recent commits were made by one contributor, giving the project a low recent bus factor. The organization-owned repository provides some handoff capacity, but no second active contributor is observed.
There are 2 open issues and no issue or pull-request activity in the last month. This suggests limited visible community activity, although it is partly offset by recent commits and releases.
The repository has only 7 stars and 4 forks, indicating a small user and contributor footprint. Popularity is supporting evidence rather than a verdict, so this is a minor concern.
The repository uses Babel for builds and has a security policy, but no security-scanning tooling was detected. The policy is a positive compensating signal, while the missing scanning remains a transparency gap.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-63709 gettext-converter is vulnerable to Prototype Pollution in versions 1.0.0 - 1.3.3. | 1.0.0 - 1.3.3 | Medium |
AIKIDO-2026-429232 gettext-converter is vulnerable to Prototype Pollution in versions 0.0.1 - 1.3.2. | 0.0.1 - 1.3.2 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
arrify Version ^2.0.1 | — | — |
encoding Version 0.1.13 | — | — |
content-type Version 1.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.