Skip to content

Bump the npm group across 2 directories with 27 updates - #147

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-8652e79120
Mar 22, 2026
Merged

Bump the npm group across 2 directories with 27 updates#147
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-8652e79120

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 1 update in the / directory: eslint.
Bumps the npm group with 1 update in the /example directory: eslint.

Updates eslint from 10.0.3 to 10.1.0

Release notes

Sourced from eslint's releases.

v10.1.0

Features

  • ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)
  • 0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

  • 2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)
  • e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

  • b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)
  • 58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)
  • 7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)
  • 035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)
  • e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)
  • 7f10d84 docs: Update README (GitHub Actions Bot)
  • aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)
  • a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

  • a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584) (Milos Djermanovic)
  • 1f42bd7 chore: update prettier to 3.8.1 (#20651) (루밀LuMir)
  • c0a6f4a chore: update dependency @​eslint/json to ^1.2.0 (#20652) (renovate[bot])
  • cc43f79 chore: update dependency c8 to v11 (#20650) (renovate[bot])
  • 2ce4635 chore: update dependency @​eslint/json to v1 (#20649) (renovate[bot])
  • f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646) (renovate[bot])
  • dbb4c95 chore: remove trunk (#20478) (sethamus)
  • c672a2a test: fix CLI test for empty output file (#20640) (kuldeep kumar)
  • c7ada24 ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (#20636) (dependabot[bot])
  • 07c4b8b test: fix RuleTester test without test runners (#20631) (Francesco Trotta)
  • 079bba7 test: Add tests for isValidWithUnicodeFlag (#20601) (Manish chaudhary)
  • 5885ae6 ci: unpin Node.js 25.x in CI (#20615) (Copilot)
  • f65e5d3 chore: update pnpm/action-setup digest to b906aff (#20610) (renovate[bot])
Commits

Updates @rollup/rollup-android-arm-eabi from 4.59.0 to 4.60.0

Release notes

Sourced from @​rollup/rollup-android-arm-eabi's releases.

v4.60.0

4.60.0

2026-03-22

Features

  • Support source phase imports as long as they are external (#6279)

Pull Requests

v4.59.1

4.59.1

2026-03-21

Bug Fixes

  • Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

Changelog

Sourced from @​rollup/rollup-android-arm-eabi's changelog.

4.60.0

2026-03-22

Features

  • Support source phase imports as long as they are external (#6279)

Pull Requests

4.59.1

2026-03-21

Bug Fixes

  • Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

Commits

Updates @rollup/rollup-android-arm64 from 4.59.0 to 4.60.0

Release notes

Sourced from @​rollup/rollup-android-arm64's releases.

v4.60.0

4.60.0

2026-03-22

Features

  • Support source phase imports as long as they are external (#6279)

Pull Requests

v4.59.1

4.59.1

2026-03-21

Bug Fixes

  • Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

Changelog

Sourced from @​rollup/rollup-android-arm64's changelog.

4.60.0

2026-03-22

Features

  • Support source phase imports as long as they are external (#6279)

Pull Requests

4.59.1

2026-03-21

Bug Fixes

  • Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

Commits

Updates @rollup/rollup-darwin-arm64 from 4.59.0 to 4.60.0

Release notes

Sourced from @​rollup/rollup-darwin-arm64's releases.

v4.60.0

4.60.0

2026-03-22

Features

  • Support source phase imports as long as they are external (#6279)

Pull Requests

v4.59.1

4.59.1

2026-03-21

Bug Fixes

  • Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

Changelog

Sourced from @​rollup/rollup-darwin-arm64's changelog.

4.60.0

2026-03-22

Features

  • Support source phase imports as long as they are external (#6279)

Pull Requests

4.59.1

2026-03-21

Bug Fixes

  • Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

Commits

Updates @rollup/rollup-darwin-x64 from 4.59.0 to 4.60.0

Release notes

Sourced from @​rollup/rollup-darwin-x64's releases.

v4.60.0

4.60.0

2026-03-22

Features

  • Support source phase imports as long as they are external (#6279)

Pull Requests

v4.59.1

4.59.1

2026-03-21

Bug Fixes

  • Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

Changelog

Sourced from @​rollup/rollup-darwin-x64's changelog.

4.60.0

2026-03-22

Features

  • Support source phase imports as long as they are external (#6279)

Pull Requests

4.59.1

2026-03-21

Bug Fixes

  • Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

Commits

Updates @rollup/rollup-freebsd-arm64 from 4.59.0 to 4.60.0

Release notes

Sourced from @​rollup/rollup-freebsd-arm64's releases.

v4.60.0

4.60.0

2026-03-22

Features

  • Support source phase imports as long as they are external (#6279)

Pull Requests

v4.59.1

4.59.1

2026-03-21

Bug Fixes

  • Fix a crash when using lazy dynamic imports with moduleSideEffects:false (#6306)

Pull Requests

@dependabot
Bump the npm group across 2 directories with 27 updates
7afbadd 
Bumps the npm group with 1 update in the / directory: [eslint](https://github.com/eslint/eslint).
Bumps the npm group with 1 update in the /example directory: [eslint](https://github.com/eslint/eslint).


Updates `eslint` from 10.0.3 to 10.1.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.0.3...v10.1.0)

Updates `@rollup/rollup-android-arm-eabi` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-android-arm64` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-darwin-arm64` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-darwin-x64` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-freebsd-arm64` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-freebsd-x64` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-arm-gnueabihf` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-arm-musleabihf` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-arm64-gnu` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-arm64-musl` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-loong64-gnu` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-loong64-musl` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-ppc64-gnu` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-ppc64-musl` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-riscv64-gnu` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-riscv64-musl` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-s390x-gnu` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-x64-gnu` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-linux-x64-musl` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-openbsd-x64` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-openharmony-arm64` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-win32-arm64-msvc` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-win32-ia32-msvc` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-win32-x64-gnu` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `@rollup/rollup-win32-x64-msvc` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `rollup` from 4.59.0 to 4.60.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.59.0...v4.60.0)

Updates `eslint` from 10.0.3 to 10.1.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.0.3...v10.1.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-android-arm-eabi"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-android-arm64"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-darwin-arm64"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-darwin-x64"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-freebsd-arm64"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-freebsd-x64"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-arm-gnueabihf"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-arm-musleabihf"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-arm64-gnu"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-arm64-musl"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-loong64-gnu"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-loong64-musl"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-ppc64-gnu"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-ppc64-musl"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-riscv64-gnu"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-riscv64-musl"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-s390x-gnu"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-x64-musl"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-openbsd-x64"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-openharmony-arm64"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-win32-arm64-msvc"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-win32-ia32-msvc"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-win32-x64-gnu"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-win32-x64-msvc"
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: rollup
  dependency-version: 4.60.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 22, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) March 22, 2026 18:28
@github-actions

github-actions Bot commented Mar 22, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 10 package(s) with unknown licenses.
See the Details below.

License Issues

pnpm-lock.yaml

PackageVersionLicenseIssue Type
@rollup/rollup-android-arm-eabi4.60.0NullUnknown License
@rollup/rollup-freebsd-arm644.60.0NullUnknown License
@rollup/rollup-freebsd-x644.60.0NullUnknown License
@rollup/rollup-linux-arm-gnueabihf4.60.0NullUnknown License
@rollup/rollup-linux-arm64-gnu4.60.0NullUnknown License
@rollup/rollup-linux-loong64-musl4.60.0NullUnknown License
@rollup/rollup-linux-ppc64-gnu4.60.0NullUnknown License
@rollup/rollup-linux-x64-gnu4.60.0NullUnknown License
@rollup/rollup-linux-x64-musl4.60.0NullUnknown License
@rollup/rollup-win32-x64-msvc4.60.0NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/eslint ^10.1.0 UnknownUnknown
npm/eslint ^10.1.0 UnknownUnknown
npm/@rollup/rollup-android-arm-eabi 4.60.0 UnknownUnknown
npm/@rollup/rollup-android-arm64 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-darwin-arm64 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-darwin-x64 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-freebsd-arm64 4.60.0 UnknownUnknown
npm/@rollup/rollup-freebsd-x64 4.60.0 UnknownUnknown
npm/@rollup/rollup-linux-arm-gnueabihf 4.60.0 UnknownUnknown
npm/@rollup/rollup-linux-arm-musleabihf 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-linux-arm64-gnu 4.60.0 UnknownUnknown
npm/@rollup/rollup-linux-arm64-musl 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-linux-loong64-gnu 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-linux-loong64-musl 4.60.0 UnknownUnknown
npm/@rollup/rollup-linux-ppc64-gnu 4.60.0 UnknownUnknown
npm/@rollup/rollup-linux-ppc64-musl 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-linux-riscv64-gnu 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-linux-riscv64-musl 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-linux-s390x-gnu 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-linux-x64-gnu 4.60.0 UnknownUnknown
npm/@rollup/rollup-linux-x64-musl 4.60.0 UnknownUnknown
npm/@rollup/rollup-openbsd-x64 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-openharmony-arm64 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-win32-arm64-msvc 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-win32-ia32-msvc 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-win32-x64-gnu 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@rollup/rollup-win32-x64-msvc 4.60.0 UnknownUnknown
npm/eslint 10.1.0 🟢 6.5
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 7Found 18/24 approved changesets -- score normalized to 7
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
npm/rollup 4.60.0 🟢 5
Details
CheckScoreReason
Code-Review🟢 3Found 3/10 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • example/package.json
  • package/package.json
  • pnpm-lock.yaml

@github-actions
github-actions Bot merged commit 56842c4 into main Mar 22, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/npm-8652e79120 branch March 22, 2026 18:30
@my-pull-request-auto-merge my-pull-request-auto-merge Bot mentioned this pull request Mar 24, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

@poad poad

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@poad