@rollup/pluginutils

Release historycaution

The package has been maintained since November 2019 with 31 releases and a latest release on May 29, 2026, though only one release appeared in the last 12 months.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. The recent release and repository push provide some compensation, but this still raises a maintenance-continuity concern.

Repo toolingcaution

The repository uses Rollup and TypeScript build tooling, but no security-scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of unfitness.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less clear for consumers.

Token permissionscaution

Three workflows lack top-level token permissions and the release workflow grants write access. This is weaker permission hygiene, although the dangerous-workflow scan found no specific exploit pattern.