BundlersUnclaimed

Rollup

Also known as
rollup

What is Rollup?

A module bundler that combines JavaScript files and compiles them using ES module format, supporting output to multiple formats (ES modules, CommonJS, UMD, SystemJS) and optimizing code size through tree-shaking to run efficiently in various environments including browsers and Node.js.

Independently observed

Rollup pricing

We don't have Rollup's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.

Platform & deployment

Independently observed
Platforms
  • CLI
  • Web

Integrations (2)

Independently observed
  • Vite
  • WMR

Security & compliance

Known vulnerabilities: 2 (1 in the last 12 months), max severity HIGH sourcea count reflects scale & disclosure, not quality

Rollup alternatives

Other bundlers we track, ranked by the same independent score.

All Rollup alternatives, ranked →

Compare Rollup

Side by side against other bundlers, attribute by attribute, with a source on every value.

Independent · unbought · dated

The Vioscale score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Rollup, not the verdict.

Balanced composite 60 / 100
low · 28%updating
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Dependent projects1000.066.3
Release cadence970.055.0
Development activity450.094.2
Stars830.032.2
Security score530.042.2
Integrations140.071.0
Capabilities00.080.0-
Security posture00.070.0-
Package downloads00.140.0-
Developer Q&A activity00.060.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Activity

AttributeValueEvidence
Commits last 30d25mediumsource · 2026-08-26 · 65%

Adoption

AttributeValueEvidence
Github stars26,306highsource · 2026-08-26 · 90%
Dependent repos1,133,301highsource · 2026-08-26 · 85%

Integrations

AttributeValueEvidence
Count2mediumsource · 2026-08-20 · 60%

Language

AttributeValueEvidence
PrimaryJavaScripthighsource · 2026-08-26 · 90%

Pricing

AttributeValueEvidence
Modelopen_sourcemediumsource · 2026-08-20 · 60%
Price levelfreemediumsource · 2026-08-20 · 60%

Release

AttributeValueEvidence
Cadence days6mediumsource · 2026-08-26 · 70%
History20 itemsmediumsource · 2026-08-26 · 70%

Security

AttributeValueEvidence
Scorecard5.3highsource · 2026-08-26 · 90%
VulnerabilitiesCount: 2 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=rollup&per_page=100 · Last 12m: 1 · Max severity: HIGHhighsource · 2026-08-26 · 90%