Is rolldown-string safe to use?

rolldown-string has no known vulnerabilities on the latest version (0.3.0). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of rolldown-string?

The latest version of rolldown-string is 0.3.0, released 2026-03-11.

Does rolldown-string have known vulnerabilities?

No known vulnerabilities on the latest version of rolldown-string.

Is rolldown-string deprecated?

No, rolldown-string is actively maintained. Latest release: 0.3.0 (2026-03-11).

What are alternatives to rolldown-string?

Popular alternatives to rolldown-string in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does rolldown-string use?

rolldown-string is licensed under MIT.

rolldown-string

npmv0.3.0

A compatibility layer for magic-string to work with Rolldown and other bundlers.

License MITpermissive5 versions1 maintainers1 deps30,178 weekly dl

sxzz/rolldown-string

/ 100

Health

use with caution

[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

magic-string

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/rolldown-string

rolldown-string

npmv0.3.0

A compatibility layer for magic-string to work with Rolldown and other bundlers.

License MITpermissive5 versions1 maintainers1 deps30,178 weekly dl

sxzz/rolldown-string

/ 100

Health

use with caution

[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

magic-string

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/rolldown-string