@napi-rs/snappy-linux-arm64-gnu
Fastest Snappy compression library in Node.js
16
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
broooooklynforehalo
Keywords
snappysnapcompressioncompressnapi-rsNAPIN-APIRustNode-APInode-addonnode-addon-api
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): The @napi-rs/snappy ecosystem migrated to GitHub Actions CI/CD publishing with SLSA attestation. This transition from personal account to GitHub Actions is a documented, security-improving pattern for this package family. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy followed by a SLSA-attested GitHub Actions publish tied to the official repo is not a takeover indicator. The provenance attestation validates the publish origin. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): This package's sole purpose is to ship a prebuilt napi-rs .node binary for Linux ARM64. Bundled binary is expected and intentional for this platform-specific sub-package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific napi-rs sub-packages legitimately have no deps and minimal READMEs; documentation lives in the parent @napi-rs/snappy package. | ai |