← Home

@dxos/cli-darwin-x64

npm Repository Homepage

DXOS CLI - darwin x64

3
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

richburdonmarik_dwittjosiahdxos-botmykola-vrmchk

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publisher is consistent with SLSA-attested automated releases from dxos/dxos monorepo. ai
maintainer-change maintainer-removed AI (maintainer-change): Maintainer removal aligns with shift to automated CI publishing; no malicious indicators present. ai
license uncommon-license:FSL-1.1-Apache-2.0 AI (license): FSL-1.1-Apache-2.0 is the documented license for the DXOS project; stable across versions. ai
npm-metadata suspicious-initial-version AI (npm-metadata): Platform-specific CLI binary package intentionally versioned at 0.0.0; stable pattern for this package. ai
bogus-package bogus-package AI (bogus-package): Tiny no-dep payload is expected for a platform-specific binary stub in the dxos CLI distribution. ai

Versions (showing 3 of 3)

Version Deps Published
0.10.0 0 / 0
0.9.0 0 / 0
0.0.0 0 / 0

v0.10.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.