@napi-rs/nice
https://linux.die.net/man/2/nice binding for Node.js
3
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
broooooklynforehalo
Keywords
napi-rsNAPIN-APIRustnode-addonnode-addon-apinice
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:vite | AI (typosquat): Scoped @napi-rs/ package binding nice(2) syscall; no relation to vite. | ai | |
| semgrep | semgrep:child-process-execsync | AI (semgrep): Used only for musl detection via 'ldd --version'; standard napi-rs pattern. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): Same musl-detection usage; benign for this native binding package. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Loads platform-specific native binary; standard napi-rs loader pattern. | ai |
v1.1.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.4
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.0.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.