rolldown
Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.
88%
Total Score
healthy
Active releases, strong repository activity, and reproducible publishing outweigh limited workflow hygiene concerns.
Health Score Breakdown
All 26 workflows were analyzed successfully; 24 use read-only permissions and all 152 action references are pinned. High-confidence findings show blanket GitHub App token permissions in release and dependency-update workflows, while a low-severity finding shows an ad hoc package install during npm publishing, creating a contained workflow-hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @oxc-project/types Version =0.153.0 | — | — |
@rolldown/pluginutils Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 9 years ago
- Unpacked Size
- 0.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.