@arsia-mons/silencer-win32-x64
An action/strategy multiplayer side-scrolling platform game set on a futuristic Mars.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | bundled-binaries | AI (npm-metadata): DLLs are well-known open-source game/multimedia libraries (SDL3, mpg123, libcurl, zlib, yasm) consistent with a game binary distribution package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific binary distribution packages legitimately have no deps, sparse README, and no keywords. | ai |
Versions (showing 17 of 17)
| Version | Deps | Published |
|---|---|---|
| 0.0.59 | 0 / 0 | |
| 0.0.58 | 0 / 0 | |
| 0.0.57 | 0 / 0 | |
| 0.0.56 | 0 / 0 | |
| 0.0.55 | 0 / 0 | |
| 0.0.54 | 0 / 0 | |
| 0.0.53 | 0 / 0 | |
| 0.0.52 | 0 / 0 | |
| 0.0.51 | 0 / 0 | |
| 0.0.50 | 0 / 0 | |
| 0.0.49 | 0 / 0 | |
| 0.0.48 | 0 / 0 | |
| 0.0.47 | 0 / 0 | |
| 0.0.46 | 0 / 0 | |
| 0.0.45 | 0 / 0 | |
| 0.0.44 | 0 / 0 | |
| 0.0.43 | 0 / 0 |
v0.0.59
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.58
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.57
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.56
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.55
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.54
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.53
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.52
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.51
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.50
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.49
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.48
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.47
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.46
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.45
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.44
2 findingsPackage contains compiled binaries that could be backdoors: • libcurl.dll • minizip.dll • mpg123.dll • out123.dll • SDL3_mixer.dll • SDL3.dll • syn123.dll • yasm.dll • yasmstd.dll • zlib1.dll ... and 1 more
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.0.43
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.