esbuild-linux-64

Name lookalikedanger

The artifact overlap is 1.0, it borrows esbuild's identity, and its README identifies itself as esbuild while being published under a different package name. Consumers most likely wanted the established esbuild package, making this a severe supply-chain and dependency-selection risk.

Release historydanger

The package has 379 releases but none in the last 12 months; its latest release was roughly 3 years 9 months before collection. The rapid historical cadence does not compensate for the prolonged release gap.

Repo bus factorcaution

Four contributors were active recently, but one contributor made about 91% of the commits. Because the repository owner is an individual rather than an organization, this concentration is a meaningful continuity concern.

Repo package mentioncaution

The linked repository is esbuild, but its name does not match this package and its README does not mention esbuild-linux-64. Combined with the exact artifact overlap, this weakens confidence that the repository directly backs this release.

Security policycaution

The linked repository has no published security policy. This is a transparency gap, although it is less important than the package's stale release and lookalike identity.