Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.
92%
Total Score
healthy
Frequent releases, active maintenance, and npm provenance outweigh minor workflow and repository-reference gaps.
The repository name does not match this platform-specific package and its README does not mention the package, creating a modest ownership-transparency concern; the organization backing and package README partly compensate.
All 26 workflows were analyzed with no untrusted checkouts, script injection, top-level write permissions, or unpinned actions; one high-confidence low-severity adhoc package installation remains a minor hygiene concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.