Gathering detailed insights and metrics for @rollup/rollup-win32-x64-msvc
Gathering detailed insights and metrics for @rollup/rollup-win32-x64-msvc
Next-generation ES module bundler
Installations
npm install @rollup/rollup-win32-x64-msvcDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
20.19.3
NPM Version
10.8.2
Score
99.5
Supply Chain
36.9
Quality
98.1
Maintenance
100
Vulnerability
100
License
Releases
539
Languages
5
JavaScript
TypeScript
Rust
HTML
CSS
JavaScript (86.19%)
TypeScript (11.64%)
Rust (2.12%)
HTML (0.05%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
NOASSERTION License
25,880 Stars
5,967 Commits
1,599 Forks
255 Watchers
33 Branches
429 Contributors
Updated on Jul 12, 2025
Maintainers
4
Package Meta Information
Latest Version
4.45.0
Package Id
@rollup/rollup-win32-x64-msvc@4.45.0
Unpacked Size
3.75 MB
Size
1.34 MB
File Count
3
NPM Version
10.8.2
Node Version
20.19.3
Published on
Jul 12, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
No dependencies detected.
@rollup/rollup-win32-x64-msvc
This is the x86_64-pc-windows-msvc binary for rollup
No vulnerabilities found.
Reason
30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'master'
- Info: 'force pushes' disabled on branch 'master'
- Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'
- Warn: required approving review count is 1 on branch 'master'
- Warn: codeowners review is not required on branch 'master'
- Info: status check found to merge onto on branch 'master'
- Info: PRs are required in order to make changes on branch 'master'
Reason
dependency not pinned by hash detected -- score normalized to 6
Details
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-and-tests.yml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/rollup/rollup/build-and-tests.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/performance-report.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/rollup/rollup/performance-report.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/performance-report.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/rollup/rollup/performance-report.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/repl-artefacts.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/rollup/rollup/repl-artefacts.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/repl-artefacts.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/rollup/rollup/repl-artefacts.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/repl-artefacts.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/rollup/rollup/repl-artefacts.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/repl-artefacts.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/rollup/rollup/repl-artefacts.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/build-and-tests.yml:597
- Warn: npmCommand not pinned by hash: .github/workflows/build-and-tests.yml:51
- Warn: npmCommand not pinned by hash: .github/workflows/build-and-tests.yml:442
- Warn: npmCommand not pinned by hash: .github/workflows/build-and-tests.yml:539
- Warn: npmCommand not pinned by hash: .github/workflows/performance-report.yml:66
- Warn: npmCommand not pinned by hash: .github/workflows/repl-artefacts.yml:62
- Info: 43 out of 43 GitHub-owned GitHubAction dependencies pinned
- Info: 11 out of 18 third-party GitHubAction dependencies pinned
- Info: 1 out of 7 npmCommand dependencies pinned
Reason
Found 13/22 approved changesets -- score normalized to 5
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build-and-tests.yml:391
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-and-tests.yml:563
- Info: topLevel 'contents' permission set to 'read': .github/workflows/build-and-tests.yml:25
- Warn: no topLevel permission defined: .github/workflows/clean-cache.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/performance-report.yml:16
- Info: topLevel 'contents' permission set to 'read': .github/workflows/repl-artefacts.yml:16
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 22 are checked with a SAST tool
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
6.6
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More