The illumos 64-bit binary for esbuild, a JavaScript bundler.
78%
Total Score
67
94
67
100
One contributor made 31 of 34 recent commits, or about 91%, while the other three contributors made one each. This concentration creates a real continuity concern for a user-owned project.
The repository has ongoing issue and pull-request intake, but only 1 issue was closed and no pull requests were merged in the last month. That suggests some backlog pressure, though recent commits and releases compensate for part of it.
The repository name does not match this platform package and its README does not mention the package name. The artifact README does identify it as an esbuild platform binary, so the mismatch is plausible for a subpackage but still warrants some caution.
The repository has no security policy. This reduces transparency for vulnerability reporting, but it is a secondary concern given the active project and release history.
All four workflows were analyzed, references are fully pinned, and three workflows use read-only permissions. The audit reported a low-confidence cache-poisoning pattern, a high-confidence archived action, and several low-severity ad hoc package installs; these are workflow hygiene concerns, not standalone severe risks because no untrusted checkout or script-injection sink was found.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.