Native bindings for Rollup
88%
Total Score
healthy
Frequent releases, signed npm provenance, and an active Rollup repository support this release despite concentrated recent commits.
The repository name does not match this binary subpackage and its README does not mention the package, creating some uncertainty about package-to-repository linkage; the shared Rollup organization provides partial context but does not remove that gap.
All seven workflows were analyzed and all 64 action references are pinned. The audit found high-confidence adhoc package installs and low-confidence cache-poisoning patterns, so workflow hygiene is not perfect but there is no confirmed untrusted checkout or script injection.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.