Is rollup-packages-polyfill-core safe to use?

rollup-packages-polyfill-core has 1 known vulnerabilities on the latest version (0.14.1). DepScope rates its health at 40/100 (high risk).

What is the latest version of rollup-packages-polyfill-core?

The latest version of rollup-packages-polyfill-core is 0.14.1, released 2026-07-23.

Does rollup-packages-polyfill-core have known vulnerabilities?

Yes. rollup-packages-polyfill-core has 1 known vulnerabilities. See depscope.dev/pkg/npm/rollup-packages-polyfill-core for details.

Is rollup-packages-polyfill-core deprecated?

No, rollup-packages-polyfill-core is actively maintained. Latest release: 0.14.1 (2026-07-23).

What are alternatives to rollup-packages-polyfill-core?

Popular alternatives to rollup-packages-polyfill-core in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does rollup-packages-polyfill-core use?

rollup-packages-polyfill-core is licensed under MIT.

rollup-packages-polyfill-core

npmv0.14.1

rollup-plugin-polyfill-node ===

License MITpermissive15 versions1 maintainers1 deps1,554 weekly dl

FredKSchott/rollup-plugin-polyfill-node

/ 100

Health

do not use

Do not install. Package is flagged as malicious (advisory MAL-2026-10160).

Health breakdown0 – 100

20/25

maintenance

6/20

popularity

15/25

security

9/15

maturity

4/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	MAL-2026-10160	Malicious code in rollup-packages-polyfill-core (npm)	—

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

⚠ Malicious package

This package is flagged as malicious by the OpenSSF/OSV community feed. Do not install.

Advisory: MAL-2026-10160 — Malicious code in rollup-packages-polyfill-core (npm)

Health History

Dependency Tree

License Audit

Dependencies (1)

@rollup/plugin-inject

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/rollup-packages-polyfill-core