@rollup/rollup-darwin-arm64

Repo package mentioncaution

The repository name does not match this platform-specific package and its README does not mention the exact package, creating a small identity-transparency gap. The Rollup organization backing and the package's binary-only structure partly offset that concern.

Workflow auditcaution

All 7 workflows were analyzed, all 64 action references are pinned, and there are no untrusted checkouts or script-injection findings. High-confidence adhoc package-install findings remain a minor workflow hygiene concern, while the low-confidence cache findings do not materially lower health.