@rollup/rollup-darwin-x64

Repo bus factorcaution

One contributor made about 95% of the 60 recent commits, creating a real concentration risk, although the organization-backed project can provide some handoff capacity.

Repo package mentioncaution

The repository name does not match this platform package and its README does not mention the package, so the package-to-repository relationship is less transparent; the monorepo context partly explains the name mismatch but not the missing README mention.

Workflow auditcaution

All 7 workflows were analyzed and all 64 action references are pinned, with no untrusted checkouts or script injection. The audit found repeated high-severity but low-confidence cache warnings and high-confidence ad hoc package installs, which are workflow hygiene concerns rather than a severe release risk.