Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.
96%
Total Score
healthy
Active, well-backed project with frequent releases, strong repository activity, and verified publishing; only a minor workflow hygiene issue remains.
All 26 workflows were analyzed without failures; 118 action references are pinned, permissions are read-only in 24 workflows, and there are no untrusted checkouts or script injections. One high-confidence low-severity finding reports an ad hoc package install in the NPM publishing workflow, so this is minor hygiene rather than a serious dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@emnapi/core Version 2.0.0-alpha.5 | — | — |
@emnapi/runtime Version 2.0.0-alpha.5 | — | — |
@napi-rs/wasm-runtime Version ~1.2.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.