@rollup/rollup-linux-powerpc64le-gnu

Workflow auditdanger

The audit found a high-confidence template-injection issue in a workflow with a workflow_run trigger and an untrusted checkout in a pull_request_target workflow; all references are pinned and most workflows use read-only permissions, but the triggered sinks remain a serious workflow hygiene risk.

Build provenancecaution

No build attestation or trusted-publisher information is provided, leaving publication provenance less transparent even though other project signals are strong.

Release historycaution

The package has 95 releases over about two years, but no registry releases in the last 12 months; the linked repository remains active, which partly offsets the release gap.

Repo package mentioncaution

The repository name does not match this platform-specific package and its README does not mention the package, creating some uncertainty about the linkage; the package's platform-binary role makes a monorepo relationship plausible.