Is rollup-packages-node-polyfills safe to use?

rollup-packages-node-polyfills has 1 known vulnerabilities on the latest version (0.13.2). DepScope rates its health at 40/100 (high risk).

What is the latest version of rollup-packages-node-polyfills?

The latest version of rollup-packages-node-polyfills is 0.13.2, released 2026-07-24.

Does rollup-packages-node-polyfills have known vulnerabilities?

Yes. rollup-packages-node-polyfills has 1 known vulnerabilities. See depscope.dev/pkg/npm/rollup-packages-node-polyfills for details.

Is rollup-packages-node-polyfills deprecated?

No, rollup-packages-node-polyfills is actively maintained. Latest release: 0.13.2 (2026-07-24).

What are alternatives to rollup-packages-node-polyfills?

Popular alternatives to rollup-packages-node-polyfills in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does rollup-packages-node-polyfills use?

rollup-packages-node-polyfills is licensed under MIT.

rollup-packages-node-polyfills

npmv0.13.2

rollup-plugin-polyfill-node ===

License MITpermissive4 versions1 maintainers1 deps369 weekly dl

FredKSchott/rollup-plugin-polyfill-node

/ 100

Health

do not use

Do not install. Package is flagged as malicious (advisory MAL-2026-12428).

Health breakdown0 – 100

20/25

maintenance

3/20

popularity

15/25

security

3/15

maturity

4/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	MAL-2026-12428	Malicious code in rollup-packages-node-polyfills (npm)	—

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

⚠ Malicious package

This package is flagged as malicious by the OpenSSF/OSV community feed. Do not install.

Advisory: MAL-2026-12428 — Malicious code in rollup-packages-node-polyfills (npm)

Health History

Dependency Tree

License Audit

Dependencies (1)

@rollup/plugin-inject

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/rollup-packages-node-polyfills