@picovoice/rhino-web
Rhino Speech-to-Intent engine for web browsers (via WebAssembly)
3
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
kyeokenarsailaveryerismikpicomatt200-okgabe-picovoice
Keywords
rhinowebvoicespeechrecognitionaiofflinedom
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | encoded-string-file:dist/esm/index.js | AI (source-diff): Base64 strings are inlined Web Worker bundles via rollup-plugin-web-worker-loader; stable pattern for this package. | ai | |
| source-diff | encoded-string-file:dist/iife/index.js | AI (source-diff): Same inlined Web Worker bundle pattern; benign for this package. | ai | |
| source-diff | encoded-string-file:dist/esm/index.min.js | AI (source-diff): Minified build with inlined worker; same pattern, not malicious. | ai | |
| source-diff | encoded-string-file:dist/iife/index.min.js | AI (source-diff): Minified IIFE build with inlined worker; same pattern, not malicious. | ai | |
| provenance | no-provenance | AI (provenance): Established Picovoice package with 19 versions and 1345 days of history; lack of Sigstore provenance is not a meaningful risk signal for this package. | ai |