@fallow-cli/win32-x64-msvc MIT 2 versions

@fallow-cli/win32-x64-msvc

npm Repository Homepage

Fallow CLI binary for Windows x64 (MSVC)

Versions

MIT

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

bartwaardenburg

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	missing-githead	AI (provenance): SLSA provenance attestation via Sigstore provides stronger commit linkage than gitHead; stable for this CI-published package.	ai	2026/05/22
provenance	publisher-changed	AI (provenance): Transition from human publisher to GitHub Actions CI is a legitimate and expected automation pattern for this binary distribution package.	ai	2026/05/11
npm-metadata	bundled-binaries	AI (npm-metadata): Platform-specific binary shim for Rust CLI; SLSA provenance attestation confirms CI/CD build integrity.	ai	2026/04/29
bogus-package	bogus-package	AI (bogus-package): No-dep, no-keyword, minimal README is expected for a platform binary distribution shim package.	ai	2026/04/29

Version	Deps	Published
0.1.4	0 / 0	2026-03-17
0.1.0	0 / 0	2026-03-17

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.