Is @rollup/plugin-inject safe to use?

@rollup/plugin-inject has no known vulnerabilities on the latest version (5.0.5). DepScope rates its health at 63/100 (moderate risk).

What is the latest version of @rollup/plugin-inject?

The latest version of @rollup/plugin-inject is 5.0.5, released 2023-10-15.

Does @rollup/plugin-inject have known vulnerabilities?

No known vulnerabilities on the latest version of @rollup/plugin-inject.

Is @rollup/plugin-inject deprecated?

No, @rollup/plugin-inject is actively maintained. Latest release: 5.0.5 (2023-10-15).

What are alternatives to @rollup/plugin-inject?

Popular alternatives to @rollup/plugin-inject in npm include: semver, minimatch, ansi-styles, brace-expansion, strip-ansi.

What license does @rollup/plugin-inject use?

@rollup/plugin-inject is licensed under MIT.

@rollup/plugin-inject

npmv5.0.5

Scan modules for global variables and injects `import` statements where necessary

License MITpermissive11 versions4 maintainers3 deps3,307,142 weekly dl

rollup/plugins

/ 100

Health

safe to use

@rollup/[email protected] is safe to use (health: 63/100)

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

9/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

5.9 KBminified

2.7 KB gzipped

3 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (3)

@rollup/pluginutils estree-walker magic-string

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@rollup/plugin-inject