← Home

@rolldown/binding-darwin-x64

npm Repository Homepage

Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.

29
Versions
MIT
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

broooooklynyyx990803rolldownbotsapphi-red

Keywords

bundleresbuildparcelrolldownrollupwebpack

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
npm-metadata bundled-binaries AI (npm-metadata): This package IS a native binding — shipping a .node binary is its sole purpose. SLSA provenance attestation further validates the binary's integrity. ai
bogus-package bogus-package AI (bogus-package): yyx990803 (Evan You) is a highly reputable maintainer, not spam. Minimal README and no deps are expected for a platform-specific native binding sub-package. ai

Versions (showing 29 of 29)

Show 33 prereleases
Version Deps Published
1.1.5 0 / 0
1.1.4 0 / 0
1.1.3 0 / 0
1.1.2 0 / 0
1.1.1 0 / 0
1.1.0 0 / 0
1.0.3 0 / 0
1.0.2 0 / 0
1.0.1 0 / 0
1.0.0 0 / 0
0.15.1 0 / 0
0.15.0 0 / 0
0.14.0 0 / 0
0.13.2 0 / 0
0.13.1 0 / 0
0.13.0 0 / 0
0.12.2 0 / 0
0.12.1 0 / 0
0.12.0 0 / 0
0.11.1 0 / 0
0.11.0 0 / 0
0.10.5 0 / 0
0.10.4 0 / 0
0.10.3 0 / 0
0.10.2 0 / 0
0.10.1 0 / 0
0.10.0 0 / 0
0.9.2 0 / 0
0.9.1 0 / 0

v1.1.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.1.4

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.