@napi-rs/canvas-linux-x64-musl
Canvas for Node.js with skia backend
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
broooooklynforehalo
Keywords
napi-rsNAPIN-APIRustnode-addonnode-addon-apicanvasimagepdfsvgskia
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| install-scripts | install-script:install | AI (install-scripts): Standard napi-rs pattern: install.js downloads prebuilt platform-specific .node binaries. Expected and documented for this entire @napi-rs/canvas package family. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): This package is a napi-rs platform-specific binary distribution; bundling a prebuilt .node file is the intended and documented distribution mechanism for this package family. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from broooooklyn to GitHub Actions is a legitimate CI/CD automation move; SLSA provenance attestation confirms builds originate from the official Brooooooklyn/canvas repo. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific napi-rs binary packages legitimately have no deps, minimal README, and tiny payload (just a .node binary). These signals are structural false positives for this package type. | ai |
Versions (showing 51 of 104)
| Version | Deps | Published |
|---|---|---|
| 1.0.1 | 0 / 0 | |
| 1.0.0 | 0 / 0 | |
| 0.1.100 | 0 / 0 | |
| 0.1.99 | 0 / 0 | |
| 0.1.98 | 0 / 0 | |
| 0.1.97 | 0 / 0 | |
| 0.1.96 | 0 / 0 | |
| 0.1.95 | 0 / 0 | |
| 0.1.94 | 0 / 0 | |
| 0.1.93 | 0 / 0 | |
| 0.1.92 | 0 / 0 | |
| 0.1.91 | 0 / 0 | |
| 0.1.90 | 0 / 0 | |
| 0.1.89 | 0 / 0 | |
| 0.1.88 | 0 / 0 | |
| 0.1.87 | 0 / 0 | |
| 0.1.86 | 0 / 0 | |
| 0.1.85 | 0 / 0 | |
| 0.1.84 | 0 / 0 | |
| 0.1.83 | 0 / 0 | |
| 0.1.82 | 0 / 0 | |
| 0.1.81 | 0 / 0 | |
| 0.1.80 | 0 / 0 | |
| 0.1.79 | 0 / 0 | |
| 0.1.78 | 0 / 0 | |
| 0.1.77 | 0 / 0 | |
| 0.1.76 | 0 / 0 | |
| 0.1.75 | 0 / 0 | |
| 0.1.74 | 0 / 0 | |
| 0.1.73 | 0 / 0 | |
| 0.1.72 | 0 / 0 | |
| 0.1.71 | 0 / 0 | |
| 0.1.70 | 0 / 0 | |
| 0.1.69 | 0 / 0 | |
| 0.1.68 | 0 / 0 | |
| 0.1.67 | 0 / 0 | |
| 0.1.66 | 0 / 0 | |
| 0.1.65 | 0 / 0 | |
| 0.1.64 | 0 / 0 | |
| 0.1.63 | 0 / 0 | |
| 0.1.62 | 0 / 0 | |
| 0.1.61 | 0 / 0 | |
| 0.1.60 | 0 / 0 | |
| 0.1.59 | 0 / 0 | |
| 0.1.58 | 0 / 0 | |
| 0.1.57 | 0 / 0 | |
| 0.1.56 | 0 / 0 | |
| 0.1.55 | 0 / 0 | |
| 0.1.54 | 0 / 0 | |
| 0.1.53 | 0 / 0 | |
| 0.1.52 | 0 / 0 |
v1.0.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.