Package Health

esbuild

An extremely fast JavaScript and CSS bundler and minifier.

Latest 0.28.2NPMNPM

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

60

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

70

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Health Score Breakdown

Dependency profilecaution

There are 26 runtime dependencies, all platform-specific esbuild packages, which is a broad dependency surface but consistent with distributing native binaries for multiple platforms.

Lifecycle scriptscaution

A postinstall script runs during installation, adding supply-chain and installation complexity even though the package structure indicates it is used to install the platform-specific executable.

Maintainerscaution

Only one registry account has publish access, creating publishing concentration; this is partly offset by the active linked repository and its multiple recent contributors.

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated contributor activity and single registry maintainer represent a genuine continuity concern.

Repo bus factorcaution

One contributor made about 91% of the 34 recent commits, a substantial continuity risk despite three other contributors remaining active.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-725219
esbuild is vulnerable to Path Traversal in versions 0.17.0 - 0.28.0.
0.17.0 - 0.28.0
Low
AIKIDO-2026-445064
esbuild is vulnerable to Code Injection in versions 0.17.0 - 0.28.0.
0.17.0 - 0.28.0
High

Package versions

Maintainers

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
2 months ago
Created
8 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform