← Home

@cubejs-backend/native

Native module for Cube.js (binding to Rust codebase)

27
Versions
Apache-2.0
License
Yes
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

cubedevincstatsbotkeydunovmaxim_cube

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern dormant-publish AI (publish-pattern): High-volume package (558 versions) with SLSA provenance; CI/CD publishing pattern is consistent with the project's release cadence. ai
phantom-deps phantom-dep:@cubejs-backend/shared AI (phantom-deps): Same-org peer dep; stable false positive for this package. ai
dependencies unvetted-dep:@cubejs-infra/post-installer AI (dependencies): First-party Cube infra tooling used consistently across versions for prebuilt binary installation. ai
provenance publisher-changed AI (provenance): Transition to GitHub Actions publisher is confirmed legitimate by SLSA/Sigstore attestation on the cube-js org pipeline. ai
install-scripts install-script:postinstall AI (install-scripts): Fetches prebuilt Rust native binaries from GitHub releases; documented pattern for this package. ai
phantom-deps phantom-dep:@cubejs-infra/post-installer AI (phantom-deps): Referenced in resources config for binary fetching, not a direct JS import; stable false positive. ai
phantom-deps phantom-dep:@cubejs-backend/cubesql AI (phantom-deps): Same-org sibling dep; phantom-dep heuristic false positive for this native binding package. ai

Versions (showing 27 of 27)

Version Deps Published
1.6.50 3 / 9
1.6.49 3 / 9
1.6.46 3 / 9
1.6.44 3 / 9
1.6.43 3 / 9
1.6.41 3 / 9
1.6.38 3 / 9
1.6.33 3 / 9
1.6.23 3 / 9
1.6.18 3 / 9
1.6.17 3 / 9
1.6.9 3 / 9
1.6.8 3 / 9
1.6.2 3 / 9
1.6.1 3 / 9
1.5.16 3 / 9
1.5.12 3 / 9
1.5.11 3 / 9
1.5.10 3 / 9
1.5.9 3 / 9
1.5.7 3 / 9
1.5.5 3 / 9
1.5.4 3 / 9
1.5.3 3 / 9
1.5.2 3 / 9
1.4.1 3 / 9
1.0.13 3 / 8