@rollup/rollup-win32-x64-msvc

Repo bus factorcaution

One contributor made 92% of recent commits, which creates concentration risk. The organization-owned project and three other active contributors partly reduce that concern, but do not eliminate it.

Repo package mentioncaution

The repository name does not match this platform-specific package and its README does not mention the package, creating a provenance-transparency gap. The package is a binary subpackage under the matching @rollup organization, which makes a monorepo relationship plausible and limits the concern.

Workflow auditcaution

All seven workflows were analyzed and all 64 action references are pinned. The audit found high-severity but low-confidence cache-poisoning patterns and high-confidence low-severity ad-hoc package installs; these are workflow hygiene concerns, not evidence of an unsafe release by themselves.