Parses ICU Message strings into an AST via JavaScript.
22%
Total Score
100
100
70
67
50
NPM marks the entire package deprecated and directs users to the backwards-compatible @formatjs/icu-messageformat-parser replacement, making this release unsuitable for a new dependency.
The package has 145 releases but none in the last 12 months, with the latest release on March 26, 2021; this indicates the package line is inactive despite its long history.
No build provenance attestation or trusted-publisher identity is present, reducing release transparency for the published artifact.
The repository name does not match this package and its README does not mention it, so the link does not clearly establish package-specific ownership; the monorepo context only partly compensates.
The repository uses established build tools and has active build infrastructure, but no security-scanning tools were detected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.1.0 | — | — |
@formatjs/ecma402-abstract Version 1.6.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.