Is rolldown safe to use?

rolldown has no known vulnerabilities on the latest version (1.2.3). DepScope rates its health at 97/100 (low risk).

What is the latest version of rolldown?

The latest version of rolldown is 1.2.3, released 2026-08-05.

Does rolldown have known vulnerabilities?

No known vulnerabilities on the latest version of rolldown.

Is rolldown deprecated?

No, rolldown is actively maintained. Latest release: 1.2.3 (2026-08-05).

What are alternatives to rolldown?

Popular alternatives to rolldown in npm include: ?, semver, minimatch, ansi-styles, brace-expansion.

What license does rolldown use?

rolldown is licensed under MIT.

rolldown

npmv1.2.3

Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.

License MITpermissive635 versions4 maintainers2 deps88,919,035 weekly dl

rolldown/rolldown

/ 100

Health

safe to use

[email protected] is safe to use (health: 97/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

12/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.84critical

Download trend

stable(+7.1%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

Dependencies (2)

@oxc-project/types @rolldown/pluginutils

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/rolldown

rolldown

npmv1.2.3

Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.

License MITpermissive635 versions4 maintainers2 deps88,919,035 weekly dl

rolldown/rolldown

/ 100

Health

safe to use

[email protected] is safe to use (health: 97/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

12/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.84critical

Download trend

stable(+7.1%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

Dependencies (2)

@oxc-project/types @rolldown/pluginutils

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/rolldown