@rollup/plugin-alias

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently slowed maintenance despite its broader history.

Repo issue activitycaution

Issue and pull-request activity is currently light: one new issue and no merged pull requests in the last month, which provides limited evidence of active upkeep.

Repo toolingcaution

The repository uses Rollup and TypeScript for builds, but no security-scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No security policy was detected in the repository, reducing transparency about vulnerability reporting and response procedures.

Workflow auditcaution

All 12 analyzed action references are unpinned, and one workflow grants top-level write permissions; high-confidence template-injection findings are present, but no untrusted trigger or checkout sink was reported, so this is workflow hygiene rather than a severe standalone risk.