@rollup/rollup-linux-loongarch64-gnu

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable for a native binary.

Release historycaution

The package has 59 releases over about 1 year, but no releases in the last 12 months; this suggests the platform package may no longer be refreshed regularly.

Repo package mentioncaution

The linked repository neither matches this package name nor mentions it in its README, so the package-to-source association is less transparent; its organization ownership provides context but does not remove that gap.

Workflow auditcaution

The audit found high-confidence template-injection findings in a workflow using a workflow_run trigger and one untrusted checkout in a pull_request_target workflow; all actions are pinned, but these workflow risks warrant caution.