@cloudflare/workerd-linux-64
👷 workerd for Linux 64-bit, Cloudflare's JavaScript/Wasm Runtime
100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
cf-ci-writedash_service_accountwrangler-publishercfprivengcf-npm-publish
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | bundled-binaries | AI (npm-metadata): workerd is a platform-specific runtime binary package; bundled binary is expected and stable. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific binary stub package from Cloudflare's official workerd runtime. No deps, tiny payload, and sparse README are expected characteristics of this package type. SLSA provenance confirms legitimate CI/CD publishing. | ai |
Versions (showing 100 of 449)
Showing 100 of 449
Next page →
v1.20250424.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.