language detector used in browser environment for i18next
82%
Total Score
80
100
95
100
50
No build attestation or trusted-publisher metadata is available, so consumers have less evidence connecting the published artifact to its source build.
This is a mature package released over roughly 11 years with 69 releases, but only one release in the last 12 months indicates a slower recent cadence.
All two recent commits came from one contributor, creating a concentrated maintenance risk. Organization backing partly offsets the risk by allowing maintenance to be handed off.
Two commits were made in the last three months, so maintenance has not stopped, though the recent volume is modest.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10250 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. i18next-browser-languagedetector is vulnerable to Cross-site Scripting (XSS) in versions 0.0.1 - 8.0.4. | 0.0.1 - 8.0.4 | Low |
| Dependency | Last Release | Score |
|---|---|---|
@babel/runtime Version ^7.23.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.