intl-messageformat
Formats ICU Message strings with number, date, plural, and select placeholders to create localized messages.
79%
Total Score
healthy
Active project, but workflows have widespread unpinned actions and high-confidence template-injection findings.
Health Score Breakdown
The project uses established TypeScript and JavaScript build tooling, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.
No repository security policy was found. This does not show a defect in the package, but it weakens the project's vulnerability-reporting transparency.
All 13 workflows were analyzed, but 76 of 79 action references are unpinned, and the audit found high-confidence template-injection findings plus medium-confidence bot-condition findings and an ad hoc package install. There are no untrusted checkouts or script-injection findings, and permissions are scoped in several workflows, which limits the overall impact.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @formatjs/fast-memoize Version 3.1.7 | — | — |
@formatjs/icu-messageformat-parser Version 3.5.21 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 12 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.