Locate and bundle third-party dependencies in node_modules
72%
Total Score
67
100
89
75
No commits and no active maintainers were observed over the last 3 months, despite a repository push in May 2026; this weakens evidence of current development activity.
The repository still has open issues and pull requests, but it recorded no closed issues or merged pull requests in the last month, which is a modest maintenance concern.
The repository name does not match the package and its README does not mention this package, creating some uncertainty about package-to-repository linkage; the organization-backed plugins monorepo partially offsets that concern.
The repository uses Rollup and TypeScript build tooling, but no security-scanning tools were detected, leaving a security-hygiene gap.
The repository has no security policy, so users lack a documented channel and process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
resolve Version ^1.22.1 | — | — |
deepmerge Version ^4.2.2 | — | — |
is-module Version ^1.0.0 | — | — |
@types/resolve Version 1.20.2 | — | — |
@rollup/pluginutils Version ^5.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.