`rollup`

Ecosystem:
npm

Package URL:
pkg:npm/rollup

Total PRs:
31,803 Dependabot PRs

Latest PR:
about 1 hour ago

Unique Repositories:
9,285 repositories

Unique Repos (30 days):
3,384 repositories

Security Advisories

Rollup 4 has Arbitrary File Write via Path Traversal

GHSA-mw96-cpmx-2vgc CVE-2026-27606 HIGH published 26 days ago • updated 19 days ago

### Summary The Rollup module bundler (specifically v4.x and present in current source) is vulnerable to an Arbitrary File Write via Path Traversal...

DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS

GHSA-gcx4-mw62-g8wm CVE-2024-47068 HIGH published over 1 year ago • updated 17 days ago

### Summary We discovered a DOM Clobbering vulnerability in rollup when bundling scripts that use `import.meta.url` or with plugins that emit and ...

Recent PRs

build(deps): Bump rollup from 4.40.2 to 4.60.0

germanfrelo/nasa-api-neows #152

4.40.2 → 4.60.0 Minor PR

Open about 1 hour ago 1 comment

chore(deps): bump rollup

traPtitech/traQ_S-UI #5087

4.50.1 → 4.60.0 Minor PR

Closed about 2 hours ago 1 comment

chore(deps)(deps-dev): Bump the development-dependencies group across 1 directory with 60 updates

civdotiq/civ.iq #48

4.59.0 → 4.60.0 Minor PR

Open about 3 hours ago 3 comments

Bump rollup from 4.53.3 to 4.60.0

sunilkbishnoi/my-portfolio #3

4.53.3 → 4.60.0 Minor PR

Closed about 3 hours ago 1 comment

chore(deps-dev): bump the dev-deps group with 28 updates

RocketChat/fuselage #1908

4.59.0 → 4.60.0 Minor PR

Open about 4 hours ago 1 comment

build(deps-dev): bump rollup from 4.59.0 to 4.60.0

remarkablemark/inline-style-parser #490

4.59.0 → 4.60.0 Minor PR

Closed about 5 hours ago 1 comment

Bump rollup from 4.32.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__claude__PR36882__20260127 #169

4.32.0 → 4.60.0 Minor PR

Open about 5 hours ago 1 comment

Bump rollup from 4.34.7 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__mra-b__PR37429__20260307 #98

4.34.7 → 4.60.0 Minor PR

Open about 5 hours ago 1 comment

chore(deps)(deps): bump the production-dependencies group across 1 directory with 18 updates

PixelDroid19/CheeseJs #15

4.59.0 → 4.60.0 Minor PR

Open about 5 hours ago 1 comment

chore(deps)(deps): bump the non-breaking-updates group across 1 directory with 27 updates

plentymarkets/plentyshop-pwa #2411

4.59.0 → 4.59.1 Patch PR

Open about 5 hours ago 1 comment

Bump rollup from 4.34.7 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__mra-a__PR37429__20260307 #98

4.34.7 → 4.60.0 Minor PR

Open about 5 hours ago 1 comment

Bump rollup from 4.21.3 to 4.60.0

code-review-benchmark/keycloak__keycloak__entelligence__PR32918__20260306 #114

4.21.3 → 4.60.0 Minor PR

Open about 5 hours ago 3 comments

Bump rollup from 4.44.1 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__mesa__PR40940__20260306 #91

4.44.1 → 4.60.0 Minor PR

Open about 6 hours ago 3 comments

Bump rollup from 4.34.8 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__claude-code__PR37634__20260310 #84

4.34.8 → 4.60.0 Minor PR

Open about 6 hours ago 1 comment

Bump rollup from 4.21.3 to 4.60.0

code-review-benchmark/keycloak__keycloak__cubic-v2__PR32918__20260313 #99

4.21.3 → 4.60.0 Minor PR

Open about 6 hours ago 1 comment

Bump rollup from 4.34.6 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__qodo-v22__PR36880__20260312 #82

4.34.6 → 4.60.0 Minor PR

Open about 6 hours ago 1 comment

Bump rollup from 4.32.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__entelligence__PR36882__20260306 #98

4.32.0 → 4.60.0 Minor PR

Open about 6 hours ago 3 comments

Bump rollup from 4.34.8 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__mra-a__PR37634__20260307 #94

4.34.8 → 4.60.0 Minor PR

Open about 6 hours ago 1 comment

Bump rollup from 4.37.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__greptile-v4__PR38446__20260306 #96

4.37.0 → 4.60.0 Minor PR

Open about 7 hours ago 1 comment

Bump rollup from 4.34.8 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__linearb__PR37634__20260309 #92

4.34.8 → 4.60.0 Minor PR

Open about 7 hours ago 1 comment

build(deps-dev): bump rollup from 4.59.0 to 4.60.0

remarkablemark/html-react-parser #2167

4.59.0 → 4.60.0 Minor PR

Closed about 7 hours ago 2 comments

Bump rollup from 4.34.6 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__mra-b__PR37038__20260307 #98

4.34.6 → 4.60.0 Minor PR

Open about 7 hours ago 1 comment

Bump rollup from 4.34.6 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__augment__PR37038__20260122 #167

4.34.6 → 4.60.0 Minor PR

Open about 7 hours ago 1 comment

web: bump the rollup group across 1 directory with 4 updates

goauthentik/authentik #21065

4.59.0 → 4.60.0 Minor PR

Open about 7 hours ago 3 comments

build(deps): bump rollup from 4.59.0 to 4.60.0 in /web

BeryJu/gravity #2116

4.59.0 → 4.60.0 Minor PR

Open about 7 hours ago 2 comments

build(deps-dev): bump rollup from 4.59.0 to 4.60.0

remarkablemark/style-to-js #855

4.59.0 → 4.60.0 Minor PR

Closed about 7 hours ago 1 comment

Bump rollup from 4.37.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__mra-a__PR38446__20260307 #87

4.37.0 → 4.60.0 Minor PR

Open about 8 hours ago 1 comment

Bump rollup from 4.24.0 to 4.60.0

code-review-benchmark/keycloak__keycloak__entelligence__PR33832__20260306 #114

4.24.0 → 4.60.0 Minor PR

Open about 8 hours ago 3 comments

Bump rollup from 4.34.7 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__kg__PR37429__20260202 #160

4.34.7 → 4.60.0 Minor PR

Open about 8 hours ago 1 comment

Bump rollup from 4.34.7 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__qodo-v2-2__PR37429__20260312 #81

4.34.7 → 4.60.0 Minor PR

Open about 8 hours ago 1 comment

Bump rollup from 4.34.7 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__mra-nano__PR37429__20260306 #101

4.34.7 → 4.60.0 Minor PR

Open about 8 hours ago 1 comment

Bump rollup from 4.32.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__qodo-v2-2__PR36882__20260312 #79

4.32.0 → 4.60.0 Minor PR

Open about 8 hours ago 1 comment

Bump rollup from 4.32.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__mra-max__PR36882__20260309 #93

4.32.0 → 4.60.0 Minor PR

Open about 8 hours ago 1 comment

Bump rollup from 4.32.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__cubic-v3__PR36882__20260320 #88

4.32.0 → 4.60.0 Minor PR

Open about 8 hours ago 1 comment

Bump rollup from 4.32.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__sourcery__PR36882__20260307 #95

4.32.0 → 4.60.0 Minor PR

Open about 8 hours ago 1 comment

build(deps):(deps-dev): bump rollup from 4.59.0 to 4.60.0

mfscpayload-690/moviemonk-ai #135

4.59.0 → 4.60.0 Minor PR

Open about 8 hours ago 2 comments

Bump rollup from 4.34.6 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__gemini__PR37038__20260128 #163

4.34.6 → 4.60.0 Minor PR

Open about 9 hours ago 1 comment

Bump rollup from 4.34.6 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__qodo-v2-2__PR36880__20260312 #79

4.34.6 → 4.60.0 Minor PR

Open about 9 hours ago 1 comment

build(deps-dev): bump rollup from 4.59.0 to 4.60.0

remarkablegames/phaser-jsx #980

4.59.0 → 4.60.0 Minor PR

Closed about 9 hours ago 1 comment

Bump rollup from 4.34.6 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__qodo-extended-summary__PR36880__20260313 #80

4.34.6 → 4.60.0 Minor PR

Open about 9 hours ago 1 comment

dependabot: bump the all group across 2 directories with 33 updates

kt-npm-modules/svelte-adapter-azure-swa #171

4.57.1 → 4.60.0 Minor PR

Open about 9 hours ago 4 comments

dependabot: bump the all group across 1 directory with 33 updates

kt-npm-modules/svelte-adapter-azure-swa #170

4.57.1 → 4.60.0 Minor PR

Open about 9 hours ago 6 comments

Bump rollup from 4.34.6 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__macroscope__PR37038__20260309 #91

4.34.6 → 4.60.0 Minor PR

Open about 10 hours ago 1 comment

Bump rollup from 4.24.0 to 4.60.0

code-review-benchmark/keycloak__keycloak__cubic-dev__PR33832__20260306 #112

4.24.0 → 4.60.0 Minor PR

Open about 10 hours ago 1 comment

Bump rollup from 4.32.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__mra-ultra__PR36882__20260306 #102

4.32.0 → 4.60.0 Minor PR

Open about 10 hours ago 1 comment

Bump rollup from 4.37.0 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak__cubic-v2__PR38446__20260313 #75

4.37.0 → 4.60.0 Minor PR

Open about 10 hours ago 1 comment

chore(deps): bump rollup from 4.55.1 to 4.60.0

anilkumarthakur60/vue3-recaptcha #210

4.55.1 → 4.60.0 Minor PR

Open about 10 hours ago 1 comment

Bump rollup from 4.34.8 to 4.60.0 in /js

harmoni-code-review-benchmark-org/keycloak__keycloak__harmoni-engineer__PR37634__20260322 #33

4.34.8 → 4.60.0 Minor PR

Open about 10 hours ago 2 comments

Bump rollup from 4.37.0 to 4.60.0 in /js

harmoni-code-review-benchmark-org/keycloak__keycloak__harmoni-engineer__PR38446__20260322 #13

4.37.0 → 4.60.0 Minor PR

Open about 10 hours ago 2 comments

Bump rollup from 4.45.1 to 4.60.0 in /js

code-review-benchmark/keycloak__keycloak-greptile__mesa__PR1__20260306 #91

4.45.1 → 4.60.0 Minor PR

Open about 10 hours ago 3 comments

Package Details

Name:	`rollup`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/rollup`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 2

View All npm Advisories

Package Information

Description:

Next-generation ES module bundler

Repository:	https://github.com/rollup/rollup
Homepage:	https://rollupjs.org/
Latest Release:	`4.41.2` 10 months ago
Dependent Repos:	1,133,301
Dependent Packages:	130,345
Downloads:	165,340,129
Ranking:	Top 0.0299% by dependent repos Top 0.0219% by downloads Top 0.0005% by dependent pkgs

PR Status

Open 14,296 (45.0%)

Merged 5,037 (15.8%)

Closed 10,443 (32.8%)

PR Types

Removal 7 (0.0%)

Minor 21,105 (66.4%)

Major 2,007 (6.3%)

Patch 6,646 (20.9%)