@rollup/rollup-linux-s390x-gnu
The compact artifact is appropriate for a platform-specific binary, and the included release notes document this version. The repository also has tests, a security policy, and fully pinned actions. Recent work is concentrated in one contributor, and the repository does not mention this package.
80%
Total Score
83
95
83
100
Health Score Breakdown
One contributor made about 94% of the recent commits. Organization backing and two additional active contributors partly compensate, but the recent work remains highly concentrated.
The linked repository name does not match this platform package and its README does not mention the package. A monorepo explains the name mismatch, but the missing README reference leaves package ownership less transparent.
All six workflows were analyzed and all 59 action references are pinned, but a high-confidence template-injection finding occurs in a workflow using workflow_run, and another workflow combines pull_request_target with an untrusted checkout. High-confidence adhoc package installs add smaller hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 2 years ago
- Unpacked Size
- 2.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.