rolldown-plugin-dts

A Rolldown plugin to generate and bundle dts files.

Latest 0.28.8

NPM

48%

Total Score

unhealthy

Lookalike identity concerns combine with concentrated ownership and workflow pinning gaps.

Health Score Breakdown

Name lookalike

The package is flagged as borrowing the identity of @rolldown/pluginutils, despite only 5.9% artifact overlap and a repository README that identifies the package correctly. The identity-borrowing flag is still a serious supply-chain concern.

Project backing

The repository owner is an individual account, so there is no organization backing shown to offset the concentrated contributor activity.

Repo bus factor

Eight contributors were active, but the top contributor made 87.3% of recent commits. Because the owner is an individual rather than an organization, this concentration is a real continuity concern.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Type declarations

The indicator reports no type declarations, which is a meaningful gap for a TypeScript declaration-generation plugin consumed through a programmatic API.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

sxzz

Direct Dependencies

Dependency	Last Release	Score
obug Version ^3.0.0	—	—
yuku-ast Version ^0.19.0	—	—
yuku-parser Version ^0.19.0	—	—
dts-resolver Version ^3.0.0	—	—
get-tsconfig Version 5.0.0-beta.6	—	—