Package Health

@rollup/plugin-replace

Replace strings in files while bundling

Latest 6.0.3NPMNPM

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Release historycaution

The package has existed for about 7 years with 26 releases and a median release interval of about 48 days, although only one release occurred in the last 12 months.

Repo commit activitycaution

No commits and no active maintainers were observed in the last three months. This is the strongest concern because it suggests current maintenance has paused, despite the package's established history and organization backing.

Repo issue activitycaution

The repository still has open issues and pull requests, but none were closed or merged in the last month, which is a modest sign of slower current activity.

Repo toolingcaution

The repository uses Rollup and TypeScript for builds, but no security scanning tools were detected, leaving a security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
magic-string
Version ^0.30.3
—
—
@rollup/pluginutils
Version ^5.0.1
—
—

Weekly Downloads

Info

Last Published
11 months ago
Created
6 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform