Package Health/@stoplight/spectral-ruleset-bundler

@stoplight/spectral-ruleset-bundler

- **plugins** - any other Rollup.js plugin, i.e. a minifier. - **target**: - `node` - a preset suitable for the Node.js runtime - `browser` - a preset tailored to Browsers - `runtime` - a preset you want to use if you want to bundle & execute the ru

Latest 1.8.0

NPM

82%

Total Score

healthy

Healthy: active development and broad contributor activity outweigh workflow hygiene gaps.

Health Score Breakdown

Build provenance

No build attestation or trusted-publisher identity was recorded, so release provenance is less verifiable even though the package has an active project and normal published artifacts.

Dependency profile

The package has 16 runtime dependencies, including several related project components. This is a meaningful dependency surface but not, by itself, evidence of poor package health.

Repo package mention

The repository name does not match the package name and its README does not mention this package. Because this is an organization-owned monorepo, the mismatch is plausible, but the package-to-source link is less transparent.

Repo tooling

The project uses TypeScript, npm scripts, and SWC for builds, but no security-scanning tools were detected. The missing scanning is a modest transparency gap rather than a severe health risk.

Security policy

No repository security policy was detected, leaving vulnerability-reporting expectations unclear for consumers.