npmpackage.info

Gathering detailed insights and metrics for @visulima/packem-rollup

Other packages similar to @visulima/packem-rollup

@visulima/packem

1.28.2

A fast and modern bundler for Node.js and TypeScript.

@visulima/rollup-css-plugin

1.0.0-alpha.1

CSS processing plugin for packem

Gathering detailed insights and metrics for @visulima/packem-rollup

@visulima/packem-rollup - 1.0.0-alpha.1 | npmpackage.info

@visulima/packem-rollup

A fast and modern bundler for Node.js and TypeScript.

1.0.0-alpha.1

MIT

TypeScript

424.69 kB

6.6

Installations

npm install @visulima/packem-rollup

Developer Guide

BETA

Typescript

No

Module System

ESM

Min. Node Version

>=18.* <=24.*

Node Version

20.19.2

NPM Version

10.9.3 Score

41.1

Supply Chain

70.9

Quality

82.1

Maintenance

100

Vulnerability

92.4

License

Pull Requests

Open

10

Total

149

Closed

64

Merged

75

Issues

Open

4

Total

12

Closed

8

Releases

236

@visulima/packem@2.0.0-alpha.2

Updated on Jul 02, 2025

@visulima/packem@2.0.0-alpha.1

Updated on Jul 02, 2025

@visulima/rollup-css-plugin@1.0.0-alpha.2

Updated on Jul 02, 2025

@visulima/packem-rollup@1.0.0-alpha.2

Updated on Jul 02, 2025

@visulima/packem-share@1.0.0-alpha.2

Updated on Jul 02, 2025

@visulima/css-style-inject@1.0.0-alpha.2

Updated on Jul 02, 2025

View All 236 releases

Languages

TypeScript

JavaScript

Handlebars

Shell

SCSS

CSS

Less

SugarSS

Stylus

Sass

TypeScript (97.95%)

JavaScript (0.75%)

Handlebars (0.71%)

Shell (0.22%)

SCSS (0.14%)

CSS (0.13%)

Less (0.04%)

SugarSS (0.03%)

Stylus (0.02%)

Sass (0.01%)

Developer

visulima

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

5 Stars

314 Commits

1 Forks

1 Watchers

14 Branches

1 Contributors

Updated on Jun 30, 2025

Sponsor this package

https://github.com/sponsors/prisis https://anolilab.com/support

Maintainers

View All 1 Contributors

Package Meta Information

Latest Version

1.0.0-alpha.1

Package Id

@visulima/packem-rollup@1.0.0-alpha.1

Unpacked Size

424.69 kB

Size

106.80 kB

File Count

NPM Version

10.9.3

Node Version

20.19.2

Published on

Jul 02, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

visulima packem-rollup

Rollup plugins for packem

^{Daniel Bannert's open source work is supported by the community on GitHub Sponsors}

Install

1npm install @visulima/packem-rollup

1yarn add @visulima/packem-rollup

1pnpm add @visulima/packem-rollup

Usage

Supported Node.js Versions

Libraries in this ecosystem make the best effort to track Node.js’ release schedule. Here’s a post on why we think this is important.

Contributing

If you would like to help take a look at the list of issues and check our Contributing guidelines.

Note: please note that this project is released with a Contributor Code of Conduct. By participating in this project you agree to abide by its terms.

Credits

License

The visulima packem-rollup is open-sourced software licensed under the MIT

No vulnerabilities found.

10

Dependency-Update-Tool

Determines if the project uses a dependency update tool.

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

SAST

Determines if the project uses static code analysis.

10

CI-Tests

Determines if the project runs tests before pull requests are merged.

10

Contributors

Determines if the project has a set of contributors from multiple organizations (e.g., companies).

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

8

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 8

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/lint.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/lint.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/lint.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/lint.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock-file-maintenance.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/lock-file-maintenance.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/preview-release.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/preview-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/semantic-release.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/semantic-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/semantic-release.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/semantic-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/visulima/packem/test.yml/main?enable=pin
Warn: downloadThenRun not pinned by hash: .github/workflows/lint.yml:306
Info: 25 out of 25 GitHub-owned GitHubAction dependencies pinned
Info: 40 out of 50 third-party GitHubAction dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

Reason

detected GitHub workflow tokens with excessive permissions

Details

Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:32
Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:33
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/lock-file-maintenance.yml:20
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/preview-release.yaml:22
Warn: jobLevel 'checks' permission set to 'write': .github/workflows/preview-release.yaml:24
Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/require-allow-edits.yml:11
Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecards.yml:31
Info: jobLevel 'actions' permission set to 'read': .github/workflows/scorecards.yml:32
Warn: no topLevel permission defined: .github/workflows/allo-allo.yaml:1
Warn: no topLevel permission defined: .github/workflows/cache-clear.yml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:23
Info: topLevel 'contents' permission set to 'read': .github/workflows/comment-issue.yml:9
Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency-review.yml:17
Info: topLevel 'contents' permission set to 'read': .github/workflows/lint.yml:16
Info: topLevel 'contents' permission set to 'read': .github/workflows/lock-file-maintenance.yml:12
Warn: no topLevel permission defined: .github/workflows/lock-issues.yaml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/preview-release.yaml:8
Info: topLevel 'contents' permission set to 'read': .github/workflows/require-allow-edits.yml:6
Info: topLevel permissions set to 'read-all': .github/workflows/scorecards.yml:20
Warn: no topLevel permission defined: .github/workflows/semantic-pull-request.yml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/semantic-release.yml:17
Warn: no topLevel permission defined: .github/workflows/stale-issues.yml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/test.yml:16

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

6.6

/10

Last Scanned on 2025-07-08T07:34:44Z

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @visulima/packem-rollup

Other packages similar to @visulima/packem-rollup

@visulima/packem-rollup

Installations

Developer Guide

No

ESM

>=18.* <=24.*

20.19.2

10.9.3

Score

Pull Requests

10

149

64

75

Issues

4

12

8

Releases

Languages

Developer

visulima

Download Statistics

GitHub Statistics

Sponsor this package

Maintainers

Package Meta Information

Total Downloads

NaN

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

visulima packem-rollup

Install

Usage

Related

Supported Node.js Versions

Contributing

Credits

License

10

10

10

10

10

10

10

10

10

10

8

0

0

0

0

0

6.6

/10