The Linux RISC-V 64-bit binary for esbuild, a JavaScript bundler.
72%
Total Score
75
92
67
100
Although 4 contributors were active recently, one contributor made about 91% of commits, leaving maintenance substantially dependent on a single person.
The repository name does not match this platform-specific package and its README does not mention the exact package name, creating some ownership ambiguity despite the README clearly identifying the esbuild project.
The repository has no security policy, which is a transparency gap for reporting and handling security issues.
All workflows were analyzed and references are pinned, but the audit found a high-severity low-confidence cache concern, a high-confidence archived action, and repeated ad-hoc package installs; one publishing workflow also grants top-level write access.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.