@biomejs/wasm-nodejs No license 51 versions

@biomejs/wasm-nodejs

npm Repository Homepage

51

Versions

—

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

nhedgerdominionlconaclosematipicosiketyan

Keywords

parserlinterformatterwasm

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	publisher-changed	AI (provenance): Biome migrated to GitHub Actions automated publishing with SLSA provenance. The transition from ematipico to GitHub Actions is a supply chain improvement, not a risk. Stable for this package going forward.	ai	2026/04/26
publish-pattern	dormant-publish	AI (publish-pattern): The wasm-nodejs sub-package may publish less frequently than the main biome package. SLSA provenance attestation from the official biomejs/biome repo confirms legitimacy regardless of publish cadence.	ai	2026/04/26
semgrep	semgrep:new-function-constructor	AI (semgrep): Standard wasm-bindgen generated glue code pattern for WASM/JS interop. Not user-controlled; expected in all wasm-bindgen output for this package.	ai	2026/04/26
semgrep	semgrep:api-obfuscation-reflect	AI (semgrep): Reflect.get() in biome_wasm.js is standard wasm-bindgen-generated glue code for WASM/JS interop, not obfuscation. This pattern is stable across all versions of this package.	ai	2026/04/25

Versions (showing 51 of 51)

Version	Deps	Published
2.4.16	0 / 0	2026-05-27
2.4.15	0 / 0	2026-05-09
2.4.14	0 / 0	2026-05-01
2.4.13	0 / 0	2026-04-23
2.4.12	0 / 0	2026-04-14
2.4.11	0 / 0	2026-04-09
2.4.10	0 / 0	2026-03-30
2.4.9	0 / 0	2026-03-25
2.4.8	0 / 0	2026-03-18
2.4.7	0 / 0	2026-03-13
2.4.6	0 / 0	2026-03-05
2.4.5	0 / 0	2026-03-02
2.4.4	0 / 0	2026-02-20
2.4.3	0 / 0	2026-02-19
2.4.2	0 / 0	2026-02-16
2.4.1	0 / 0	2026-02-16
2.4.0	0 / 0	2026-02-15
2.3.15	0 / 0	2026-02-12
2.3.14	0 / 0	2026-02-03
2.3.13	0 / 0	2026-01-26
2.3.12	0 / 0	2026-01-23
2.3.11	0 / 0	2026-01-03
2.3.10	0 / 0	2025-12-17
2.3.9	0 / 0	2025-12-15
2.3.8	0 / 0	2025-11-27
2.3.7	0 / 0	2025-11-21
2.3.6	0 / 0	2025-11-17
2.3.5	0 / 0	2025-11-11
2.3.4	0 / 0	2025-11-05
2.3.3	0 / 0	2025-11-03
2.3.2	0 / 0	2025-10-28
2.3.1	0 / 0	2025-10-26
2.3.0	0 / 0	2025-10-24
2.2.7	0 / 0	2025-10-22
2.2.6	0 / 0	2025-10-13
2.2.5	0 / 0	2025-10-02
2.2.4	0 / 0	2025-09-10
2.2.2	0 / 0	2025-08-23
2.2.0	0 / 0	2025-08-14
2.1.4	0 / 0	2025-08-07
2.1.3	0 / 0	2025-07-29
2.1.2	0 / 0	2025-07-17
2.1.1	0 / 0	2025-07-08
2.1.0	0 / 0	2025-07-08
2.0.6	0 / 0	2025-06-27
2.0.5	0 / 0	2025-06-23
2.0.4	0 / 0	2025-06-21
2.0.3	0 / 0	2025-06-21
2.0.2	0 / 0	2025-06-20
2.0.1	0 / 0	2025-06-20
2.0.0	0 / 0	2025-06-17

v2.4.16

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.15

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.14

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.13

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.12

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.11

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.10

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.9

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.8

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.7

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.6

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.5

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.4

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.3

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.4.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.15

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.14

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.13

2 findings

HIGH Publisher changed: ematipico → GitHub Actions (on 2026-01-26) provenance

This version was published by a different npm account than previous versions on 2026-01-26. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.12

2 findings

HIGH Publisher changed: ematipico → GitHub Actions (on 2026-01-23) provenance

This version was published by a different npm account than previous versions on 2026-01-23. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.11

2 findings

HIGH Publisher changed: ematipico → GitHub Actions (on 2026-01-03) provenance

This version was published by a different npm account than previous versions on 2026-01-03. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.10

2 findings

HIGH Publisher changed: ematipico → GitHub Actions (on 2025-12-17) provenance

This version was published by a different npm account than previous versions on 2025-12-17. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.9

2 findings

HIGH Publisher changed: ematipico → GitHub Actions (on 2025-12-15) provenance

This version was published by a different npm account than previous versions on 2025-12-15. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.8

2 findings

HIGH Publisher changed: ematipico → GitHub Actions (on 2025-11-27) provenance

This version was published by a different npm account than previous versions on 2025-11-27. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.7

2 findings

HIGH Publisher changed: ematipico → GitHub Actions (on 2025-11-21) provenance

This version was published by a different npm account than previous versions on 2025-11-21. This could indicate a legitimate maintainer transition or an account compromise.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.6

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.5

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.4

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.3

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.3.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.1.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.4

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v2.0.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.