hermes-estree
Flow types for the Flow-ESTree spec produced by the hermes parser
78%
Total Score
100
89
75
Health Score Breakdown
The repository name does not match the package name and its README does not mention hermes-estree, so package ownership is less transparent. The organization-backed monorepo context partly offsets the name mismatch but not the missing README mention.
Version 0.37.0 is not a prerelease and recent releases contain no prereleases, although the pre-1.0 major version leaves more room for API change than a stable-major package.
All 11 workflows were analyzed, but all 46 action references are unpinned and the audit reports high-confidence template-injection and unpinned-image findings plus secrets inheritance. No dangerous trigger, untrusted checkout, or script injection was found, so this is a hygiene caution rather than a severe health failure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 4 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.