The OpenBSD 64-bit binary for esbuild, a JavaScript bundler.
72%
Total Score
75
86
67
100
One contributor made 31 of 34 recent commits, leaving maintenance capacity highly concentrated despite three additional contributors being active.
The repository name does not match this platform-specific package and its README does not name the package, creating some identity ambiguity, although the package README directly points to the same esbuild repository.
The project uses build tooling, but no security scanning tools were detected, leaving a modest transparency and review gap.
No repository security policy was found, which weakens vulnerability-reporting transparency for a widely used build tool.
All four workflows were analyzed with no untrusted checkout or script-injection paths and all 19 action references pinned. The audit found mostly low-impact package-install and archived-action issues; the high-severity cache finding had low confidence, while one publish workflow has broad top-level write permissions.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.