@rollup/plugin-image
Import JPG, PNG, GIF, SVG, and WebP files
62%
Total Score
caution
Usable with caveats: no release in nearly three years, despite an active organization-backed repository.
Health Score Breakdown
The package uses a prepare script during installation, adding build-time behavior that deserves awareness but is not severe by itself.
The latest registry release was nearly three years ago, with no releases in the last 12 months. This is a meaningful maintenance concern, though the repository was pushed recently.
The repository recorded zero commits and zero active maintainers in the last three months. Its recent push and organization backing partly offset this, but current development activity remains thin.
The repository uses Rollup and TypeScript build tooling, but no security scanning tools were detected, leaving a modest security-process gap.
No repository security policy was found, reducing transparency about how vulnerabilities are reported and handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mini-svg-data-uri Version ^1.4.4 | — | — |
@rollup/pluginutils Version ^5.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 6 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.