The Windows 64-bit binary for esbuild, a JavaScript bundler.
84%
Total Score
67
90
75
100
The repository is owned by a user rather than an organization, so the concentrated recent commit activity is less readily offset by formal organizational handoff capacity.
One contributor made about 91% of the 34 recent commits. Although three others were active, this remains a meaningful continuity risk for a user-owned project.
The repository name and README do not mention this exact platform package. Because the package README explicitly identifies it as the Windows binary for esbuild, the mismatch is explainable as a platform subpackage but still reduces direct package-to-repository transparency.
The project uses build tooling, but no security-scanning tools were detected. This is a modest repository hygiene gap rather than evidence of unsafe release behavior.
No security policy was detected in the linked repository, reducing transparency for vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.