
Security News
Packagist Urges Immediate Composer Update After GitHub Actions Token Leak
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.
@babel/runtime-corejs2
Advanced tools
babel's modular runtime helpers with core-js@2 polyfilling
See our website @babel/runtime-corejs2 for more information.
Using npm:
npm install --save @babel/runtime-corejs2
or using yarn:
yarn add @babel/runtime-corejs2
@babel/runtime is a similar package that provides the same runtime helpers and polyfills but uses core-js@3 instead of core-js@2. It is more up-to-date and recommended for new projects.
core-js is a modular standard library for JavaScript that includes polyfills for ECMAScript features. It can be used directly to polyfill features without relying on Babel's runtime.
regenerator-runtime is a runtime library for transforming generator functions and async/await syntax. It is often used in conjunction with Babel to provide support for these features in older environments.
FAQs
babel's modular runtime helpers with core-js@2 polyfilling
The npm package @babel/runtime-corejs2 receives a total of 761,075 weekly downloads. As such, @babel/runtime-corejs2 popularity was classified as popular.
We found that @babel/runtime-corejs2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.

Company News
Socket was named to the Rising in Cyber 2026 list, recognizing 30 private cybersecurity startups selected by CISOs and security executives.