Native bindings for Rollup
91%
Total Score
healthy
Frequent stable releases, active project backing, and npm provenance outweigh limited workflow hygiene concerns.
The repository name does not match this platform package and its README does not mention the package, creating some uncertainty about the exact package-to-repository mapping. The organization-backed monorepo context partly offsets that concern.
All seven workflows were analyzed and action references are fully pinned, but three high-confidence low-severity adhoc-package findings show installs outside a lockfile. Low-confidence cache-poisoning findings are hygiene concerns rather than decisive evidence, and no untrusted checkout or script-injection sink was found.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.