@napi-rs/canvas-darwin-arm64
Canvas for Node.js with skia backend
13
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
broooooklynforehalo
Keywords
napi-rsNAPIN-APIRustnode-addonnode-addon-apicanvasimagepdfsvgskia
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | bundled-binaries | AI (npm-metadata): This package is a napi-rs platform-specific binary distribution; shipping a prebuilt .node file is the intended and documented pattern for @napi-rs/canvas platform packages. | ai | |
| provenance | publisher-changed | AI (provenance): napi-rs/canvas uses GitHub Actions CI/CD to publish platform-specific binaries; transition from broooooklyn to GitHub Actions is the expected automated publishing pattern, confirmed by SLSA provenance attestation. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific napi-rs binary sub-packages legitimately have no deps, minimal README, and tiny JS payload (single .node binary). These signals are structural false positives for this package type. | ai |