@rollup/rollup-linux-arm-musleabihf

Repo bus factorcaution

One contributor made about 95% of the last 3 months' commits. The organization-owned project provides some handoff capacity, but this concentration remains a maintenance risk.

Repo package mentioncaution

The repository name does not match this platform package and its README does not mention it. That is understandable for a monorepo subpackage, but the lack of an explicit reference slightly weakens package-to-repository transparency.

Workflow auditcaution

All 7 workflows were analyzed and all 64 action references are pinned, with no untrusted checkout or script-injection findings. The audit still reports low-confidence cache-poisoning hygiene findings and high-confidence ad hoc package installs, which merit caution but are not severe on their own.