recma plugin to parse JavaScript
68%
Total Score
75
100
89
83
This is the package's only release, published about 23 months ago, with no releases in the last 12 months; that limits evidence of ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is meaningful evidence of slowing maintenance when combined with the one-release history.
TypeScript and npm build tooling are used, supporting a reproducible project structure, although no security scanning tool was detected.
Both workflows were analyzed with no audit findings and no untrusted checkout or script-injection sinks. All four action references are unpinned, leaving a moderate workflow reproducibility and dependency-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vfile Version ^6.0.0 | — | — |
unified Version ^11.0.0 | — | — |
@types/estree Version ^1.0.0 | — | — |
esast-util-from-js Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.