@rolldown/binding-win32-x64-msvc
Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.
62
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
broooooklynyyx990803rolldownbotsapphi-red
Keywords
bundleresbuildparcelrolldownrollupwebpack
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| npm-metadata | bundled-binaries | AI (npm-metadata): This package's sole purpose is to ship a precompiled Rust native binding (.node file) for win32-x64-msvc. Bundled binary is expected and verified via SLSA provenance attestation. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific native binding packages legitimately have no deps, minimal READMEs, and yyx990803 is Evan You (Vue.js creator), not a spam publisher. These signals are false positives for this package type. | ai |
Versions (showing 62 of 62)
v1.1.5
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.1.4
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.1.3
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.