The NetBSD ARM 64-bit binary for esbuild, a JavaScript bundler.
78%
Total Score
75
92
67
100
One contributor made 31 of 34 recent commits, so practical maintenance is highly concentrated even though three other contributors were active. The owner is an individual rather than an organization, leaving limited demonstrated handoff capacity.
The linked repository neither matches this platform-specific package name nor mentions it in the README. That makes the package-to-repository relationship less explicit, although the README does identify it as an esbuild binary.
The repository has no security policy. This does not show unsafe code, but it reduces transparency about how dependency vulnerabilities and reports are handled.
All four workflows were analyzed, all 19 action references are pinned, and no untrusted checkout or script injection was found. One workflow has broad top-level write permissions and the audit found high-confidence archived-action and ad hoc-package hygiene issues, but the cache-poisoning warning is low confidence and there is no untrusted trigger to amplify it.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.