@footloose2/server-darwin-arm64 MIT 2 versions

@footloose2/server-darwin-arm64

npm Repository Homepage

Versions

MIT

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

takanopontaro

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
npm-metadata	bundled-binaries	AI (npm-metadata): Platform binary package; the binary IS the deliverable, published with SLSA provenance from GitHub Actions.	ai	2026/04/29
bogus-package	bogus-package	AI (bogus-package): Minimal metadata is expected for a scoped platform-specific binary distribution package.	ai	2026/04/29
npm-metadata	no-description	AI (npm-metadata): Platform binary sub-package; missing description is a cosmetic issue, not a risk signal here.	ai	2026/04/29

Version	Deps	Published
0.0.8	0 / 0	2026-04-27
0.0.7	0 / 0	2026-04-16

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.