@prairielearn/bind-mount
This package allows for the creation and removal of bind mounts via native bindings to the [`mount()`](https://man7.org/linux/man-pages/man2/mount.2.html) and [`umount()`](https://man7.org/linux/man-pages/man2/umount.2.html) Linux system calls. These bind
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-added | AI (maintainer-change): CI-published with SLSA provenance and no code changes; consistent with normal org maintainer roster update. | ai | |
| provenance | missing-githead | AI (provenance): CI-published monorepo package; no behavioral change, gitHead gap is metadata noise. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Org-owned monorepo package published via GitHub Actions, not a takeover pattern. | ai | |
| install-scripts | install-script:install | AI (install-scripts): node-gyp rebuild is the standard native addon compile step; stable for this package. | ai | |
| phantom-deps | phantom-dep:nan | AI (phantom-deps): nan is a native addon build-time dependency used via binding.gyp, not directly imported in JS. | ai | |
| phantom-deps | phantom-dep:node-gyp | AI (phantom-deps): node-gyp is a known implicit build tool dependency, not directly imported in JS. | ai |
Versions (showing 7 of 7)
| Version | Deps | Published |
|---|---|---|
| 2.0.6 | 3 / 4 | |
| 2.0.5 | 3 / 4 | |
| 2.0.3 | 3 / 5 | |
| 2.0.1 | 3 / 5 | |
| 2.0.0 | 3 / 5 | |
| 1.1.16 | 3 / 5 | |
| 1.1.14 | 3 / 4 |
v2.0.6
2 findingsThis version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: GitHub Actions.
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v2.0.1
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.