rollup-plugin-postcss

Release historydanger

The package has a long history and 87 releases, but it has had no release in nearly five years. That materially raises the risk that compatibility and maintenance have stalled.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot verify how the published artifact was produced. This is a transparency gap rather than evidence of malicious behavior.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern that active maintenance has stopped.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 132 issues and 46 pull requests remain open, suggesting a substantial unattended backlog.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.