Node.js Build Tool NOASSERTION Latest: v4.62.5

Rollup

Module bundler for JavaScript that compiles small pieces of code into complex libraries

npm GitHub

Health Metrics

Project Health at a Glance

Live data from GitHub and npm, updated daily.

⭐

26.3K+4

GitHub Stars

📦

v4.62.5

Latest Release · 4 days ago

🔄

14d

Avg. Release Cadence

🐛

604

Open Issues

📅

Today

Last Commit

⬇️

121.3M

Weekly Downloads

🔒

Active CVEs

Data last fetched: 2026-08-24

Security

2 active CVEs reported via OSV.dev

GHSA-gcx4-mw62-g8wm CVSS_V3

DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS

Published: 2024-09-23 Fixed in: 3.29.5

GHSA-mw96-cpmx-2vgc CVSS_V4

Rollup 4 has Arbitrary File Write via Path Traversal

Published: 2026-02-25 Fixed in: 2.80.0

Ecosystem

Other Build Tool projects in the Node.js ecosystem worth evaluating.

Get Help

Get SLA-backed support, security patches, and direct access to senior engineers for Rollup — without relying on volunteer maintainers.

Talk to an Expert →