Replace strings in files while bundling
68%
Total Score
67
100
89
80
The package has existed for about 7 years with 26 releases and a median release interval of about 48 days, although only one release occurred in the last 12 months.
No commits and no active maintainers were observed in the last three months. This is the strongest concern because it suggests current maintenance has paused, despite the package's established history and organization backing.
The repository still has open issues and pull requests, but none were closed or merged in the last month, which is a modest sign of slower current activity.
The repository uses Rollup and TypeScript for builds, but no security scanning tools were detected, leaving a security-process gap.
No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
magic-string Version ^0.30.3 | — | — |
@rollup/pluginutils Version ^5.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.