@rollup/plugin-virtual

Build provenancecaution

No build attestation or trusted-publisher provenance was provided, reducing publication transparency, though this does not by itself indicate an unhealthy project.

Lifecycle scriptscaution

A prepare lifecycle script runs during installation. This is not inherently unsafe, but it adds install-time behavior that deserves attention in constrained build environments.

Release historycaution

The package has had no release in nearly three years, despite a moderate historical release cadence; this raises the chance that fixes and compatibility updates are no longer arriving.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful current-maintenance gap even though the repository was recently pushed.

Repo toolingcaution

The repository uses Rollup and TypeScript for builds, but no security-scanning tools were detected; this is a modest transparency and hygiene gap.