The IBM AIX PowerPC 64-bit binary for esbuild, a JavaScript bundler.
80%
Total Score
75
89
75
100
One contributor made 31 of 34 recent commits, so maintenance depends heavily on a single person even though three others were active.
The repository name does not match this platform subpackage and its README does not mention the package, creating some uncertainty about the linkage even though the package README points to the esbuild project.
The project uses build tooling, but no security scanning tools were detected, leaving a modest gap in repository hygiene.
No security policy was found in the repository, reducing transparency around vulnerability reporting and response.
All four workflows were analyzed with no untrusted checkout or script-injection paths and all actions pinned. The audit still found a high-severity but low-confidence cache concern, archived action use, ad hoc package installs, and one workflow with top-level write permissions; these are workflow-hygiene cautions rather than standalone severe risks.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.