rollup-plugin-visualizer

Repo bus factorcaution

One contributor made all commits in the last 3 months, concentrating recent maintenance in a single person and increasing continuity risk.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, which is thin recent activity despite the same-day release and long release history.

Repo toolingcaution

The project uses established build and test tooling, but no security scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkouts or script injection, but all 4 action references are unpinned and the deployment workflow installs a package outside its lockfile; the high-severity cache finding has low confidence and is treated as hygiene.