@napi-rs/snappy-linux-arm64-musl
Fastest Snappy compression library in Node.js
16
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
broooooklynforehalo
Keywords
snappysnapcompressioncompressnapi-rsNAPIN-APIRustNode-APInode-addonnode-addon-api
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed to GitHub Actions with SLSA provenance attestation — this reflects legitimate CI/CD automation adoption by the known maintainer (broooooklyn/snappy). Stable for this package. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Dormancy followed by GitHub Actions publish with SLSA attestation indicates migration to automated publishing, not account takeover. SLSA provenance corroborates legitimate origin. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): This package's sole purpose is distributing the precompiled .node binary for Linux ARM64 musl. Bundled binary is expected and intentional for napi-rs platform packages. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific napi-rs binary sub-packages legitimately have no deps and minimal READMEs; these signals are structural false positives for this package type. | ai |