@rollup/rollup-android-arm-eabi
The package has a clear MIT license, release notes, and a verified npm provenance record. The repository is active and organization-backed, though its package relationship is not explicit.
68%
Total Score
100
94
50
100
Health Score Breakdown
All six workflows were analyzed and all 59 action references are pinned, but a high-confidence template-injection finding occurs in a workflow_run workflow, and another workflow combines pull_request_target with an untrusted checkout. These create material release-workflow risk.
The repository name does not match this package and its README does not mention it. Although this can occur for monorepo subpackages, the package relationship is not explicit and warrants caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 hour ago
- Created
- 3 years ago
- Unpacked Size
- 1.4 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.