@rollup/wasm-node

Repo bus factorcaution

One contributor made about 95% of the 60 recent commits, creating concentration risk; the organization-owned project provides some ability to hand maintenance off.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, which makes package-to-repository ownership less explicit; the @rollup namespace and Rollup organization indicate this is plausibly a monorepo subpackage.

Workflow auditcaution

All seven workflows were analyzed, all 64 action references are pinned, and there are no untrusted checkouts or script-injection findings. Low-confidence cache warnings and high-confidence ad hoc package installs are limited workflow hygiene concerns.