@napi-rs/snappy-linux-x64-gnu
Fastest Snappy compression library in Node.js
16
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
broooooklynforehalo
Keywords
snappysnapcompressioncompressnapi-rsNAPIN-APIRustNode-APInode-addonnode-addon-api
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed to GitHub Actions as part of CI/CD automation with SLSA provenance. This is a supply chain hardening measure, not a compromise signal, for this package. | ai | |
| provenance | slsa-provenance | AI (provenance): Package has SLSA provenance attestation via Sigstore; CI/CD publishing is the intended model for this napi-rs platform binary package. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): Platform-specific binary shards of napi-rs packages are only republished when the parent package releases; long dormancy is expected and not a takeover indicator here. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): This package's sole purpose is to ship a precompiled napi-rs .node binary for Linux x64 GNU. Bundled binary is expected and intentional for this platform-specific sub-package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific napi-rs binary sub-packages have no deps and minimal READMEs by design; these signals are structural false positives for this package type. | ai |