@rolldown/binding-darwin-x64
Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.
62
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
broooooklynyyx990803rolldownbotsapphi-red
Keywords
bundleresbuildparcelrolldownrollupwebpack
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | bundled-binaries | AI (npm-metadata): This package IS a native binding — shipping a .node binary is its sole purpose. SLSA provenance attestation further validates the binary's integrity. | ai | |
| bogus-package | bogus-package | AI (bogus-package): yyx990803 (Evan You) is a highly reputable maintainer, not spam. Minimal README and no deps are expected for a platform-specific native binding sub-package. | ai |
Versions (showing 62 of 62)
v1.1.5
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.1.4
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.