Native bindings for Rollup
88%
Total Score
healthy
Frequent releases and active project backing outweigh concentrated contributions and minor workflow hygiene concerns.
One contributor made 55 of 60 recent commits, so activity is highly concentrated; the organization-owned project provides some capacity to hand maintenance off, but the current concentration remains a caution.
All 7 workflows were analyzed with no unpinned actions, untrusted checkouts, or script injection; high-confidence adhoc-package findings and low-confidence cache-poisoning findings are limited workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.