@realtimex/node-llama-cpp-win-x64-cuda-ext
Extension of @realtimex/win-x64-cuda - prebuilt binary for node-llama-cpp for Windows x64 with CUDA support
30
Versions
MIT
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
realtimex
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): New chunk dep follows established same-org, same-version chunked binary pattern. | ai | |
| phantom-deps | phantom-dep:@realtimex/node-llama-cpp-win-x64-cuda-ext-chunk-01 | AI (phantom-deps): Chunk packages are binary data consumed by the assembler at install time, not imported as JS modules. Expected pattern for chunked binary distribution. | ai | |
| phantom-deps | phantom-dep:@realtimex/node-llama-cpp-win-x64-cuda-ext-chunk-02 | AI (phantom-deps): Chunk packages are binary data consumed by the assembler at install time, not imported as JS modules. Expected pattern for chunked binary distribution. | ai | |
| phantom-deps | phantom-dep:@realtimex/node-llama-cpp-win-x64-cuda-ext-chunk-03 | AI (phantom-deps): Chunk packages are binary data consumed by the assembler at install time, not imported as JS modules. Expected pattern for chunked binary distribution. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Postinstall assembles chunked binary dependencies into the final prebuilt binary. This is the documented install flow for this platform-specific package; stable across versions. | ai | |
| phantom-deps | phantom-dep:@realtimex/node-llama-cpp-win-x64-cuda-ext-chunk-05 | AI (phantom-deps): Chunk packages are binary data consumed by the assembler at install time, not imported as JS modules. Expected pattern for chunked binary distribution. | ai | |
| phantom-deps | phantom-dep:@realtimex/node-llama-cpp-win-x64-cuda-ext-chunk-06 | AI (phantom-deps): Chunk packages are binary data consumed by the assembler at install time, not imported as JS modules. Expected pattern for chunked binary distribution. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific binary sub-packages commonly lack detailed READMEs and keywords; not a security concern for this package type. | ai | |
| phantom-deps | phantom-dep:@realtimex/node-llama-cpp-win-x64-cuda-ext-chunk-04 | AI (phantom-deps): Chunk packages are binary data consumed by the assembler at install time, not imported as JS modules. Expected pattern for chunked binary distribution. | ai |
Versions (showing 30 of 130)
| Version | Deps | Published |
|---|---|---|
| 0.31.0 | 6 / 0 | |
| 0.30.0 | 6 / 0 | |
| 0.29.0 | 6 / 0 | |
| 0.28.0 | 6 / 0 | |
| 0.27.2 | 6 / 0 | |
| 0.27.1 | 6 / 0 | |
| 0.27.0 | 6 / 0 | |
| 0.26.0 | 6 / 0 | |
| 0.25.0 | 6 / 0 | |
| 0.24.0 | 6 / 0 | |
| 0.23.0 | 6 / 0 | |
| 0.22.0 | 6 / 0 | |
| 0.21.0 | 6 / 0 | |
| 0.20.0 | 6 / 0 | |
| 0.19.0 | 6 / 0 | |
| 0.18.0 | 6 / 0 | |
| 0.17.0 | 6 / 0 | |
| 0.16.0 | 6 / 0 | |
| 0.15.0 | 6 / 0 | |
| 0.14.0 | 6 / 0 | |
| 0.13.0 | 6 / 0 | |
| 0.12.0 | 6 / 0 | |
| 0.11.0 | 6 / 0 | |
| 0.8.0 | 6 / 0 | |
| 0.7.0 | 6 / 0 | |
| 0.6.0 | 6 / 0 | |
| 0.5.0 | 6 / 0 | |
| 0.4.0 | 6 / 0 | |
| 0.3.1 | 6 / 0 | |
| 0.3.0 | 6 / 0 |
v0.29.0
2 findings
HIGH
Package has 'postinstall' script
install-scripts
Script: node ./dist/index.js --assemble
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.19.0
2 findings
HIGH
Package has 'postinstall' script
install-scripts
Script: node ./dist/index.js --assemble
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.