@panache-cli/win32-arm64
Prebuilt panache binary for win32-arm64. Install panache-cli instead.
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | bundled-binaries | AI (npm-metadata): Package exists solely to distribute a prebuilt platform binary; bundled .exe is expected and covered by SLSA provenance. | ai |
Versions (showing 14 of 14)
| Version | Deps | Published |
|---|---|---|
| 2.51.0 | 0 / 0 | |
| 2.50.0 | 0 / 0 | |
| 2.49.0 | 0 / 0 | |
| 2.48.0 | 0 / 0 | |
| 2.47.0 | 0 / 0 | |
| 2.46.0 | 0 / 0 | |
| 2.45.0 | 0 / 0 | |
| 2.44.0 | 0 / 0 | |
| 2.43.1 | 0 / 0 | |
| 2.43.0 | 0 / 0 | |
| 2.42.0 | 0 / 0 | |
| 2.41.1 | 0 / 0 | |
| 2.41.0 | 0 / 0 | |
| 2.40.0 | 0 / 0 |
v2.51.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.50.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.49.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.48.0
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.47.0
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.46.0
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.45.0
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.44.0
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.43.1
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.43.0
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.42.0
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.41.1
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.40.0
2 findingsPackage contains compiled binaries that could be backdoors: • panache.exe
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.