@rollup/rollup-openbsd-x64
The package is a small native binary with a current README and exact release notes, so missing typings and tests in the artifact are expected. Its organization-backed project has regular releases, signed provenance, and active maintenance, but the workflow findings warrant care.
78%
Total Score
100
90
0
100
Health Score Breakdown
A high-confidence template-injection finding occurs in a workflow triggered by workflow_run, and an untrusted checkout is used with pull_request_target. All 59 action references are pinned, but the exploitable workflow patterns are a serious supply-chain hygiene concern.
The repository name does not match this package and its README does not mention it. That can be normal for a platform-specific subpackage in a monorepo, but the missing direct mention leaves some package-to-repository ambiguity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 9 months ago
- Unpacked Size
- 2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.