← Home

@rollup/rollup-darwin-arm64

100
Versions
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

shellscaperich_harrisguybedfordlukastaegert

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Rollup officially migrated publishing to GitHub Actions CI; SLSA attestation confirms trusted build provenance. ai
npm-metadata bundled-binaries AI (npm-metadata): Platform-specific native binding package; .node binary is the intended deliverable, published with SLSA provenance. ai
bogus-package bogus-package AI (bogus-package): Minimal native binding packages legitimately have no deps, sparse README, and no keywords. ai

Versions (showing 100 of 117)

Version Deps Published
4.62.2 0 / 0
4.62.1 0 / 0
4.62.0 0 / 0
4.61.1 0 / 0
4.61.0 0 / 0
4.60.4 0 / 0
4.60.3 0 / 0
4.60.2 0 / 0
4.60.1 0 / 0
4.60.0 0 / 0
4.59.1 0 / 0
4.59.0 0 / 0
4.58.0 0 / 0
4.57.1 0 / 0
4.57.0 0 / 0
4.56.0 0 / 0
4.55.3 0 / 0
4.55.2 0 / 0
4.55.1 0 / 0
4.55.0 0 / 0
4.54.0 0 / 0
4.53.5 0 / 0
4.53.4 0 / 0
4.53.3 0 / 0
4.53.2 0 / 0
4.53.1 0 / 0
4.53.0 0 / 0
4.52.5 0 / 0
4.52.4 0 / 0
4.52.3 0 / 0
4.52.2 0 / 0
4.52.1 0 / 0
4.52.0 0 / 0
4.51.0 0 / 0
4.50.2 0 / 0
4.50.1 0 / 0
4.50.0 0 / 0
4.49.0 0 / 0
4.48.1 0 / 0
4.48.0 0 / 0
4.47.1 0 / 0
4.47.0 0 / 0
4.46.4 0 / 0
4.46.3 0 / 0
4.46.2 0 / 0
4.46.1 0 / 0
4.46.0 0 / 0
4.45.3 0 / 0
4.45.1 0 / 0
4.45.0 0 / 0
4.44.2 0 / 0
4.44.1 0 / 0
4.44.0 0 / 0
4.43.0 0 / 0
4.42.0 0 / 0
4.41.2 0 / 0
4.41.1 0 / 0
4.41.0 0 / 0
4.40.2 0 / 0
4.40.1 0 / 0
4.40.0 0 / 0
4.39.0 0 / 0
4.38.0 0 / 0
4.37.0 0 / 0
4.36.0 0 / 0
4.35.0 0 / 0
4.34.9 0 / 0
4.34.8 0 / 0
4.34.7 0 / 0
4.34.6 0 / 0
4.34.5 0 / 0
4.34.4 0 / 0
4.34.3 0 / 0
4.34.2 0 / 0
4.34.1 0 / 0
4.34.0 0 / 0
4.33.0 0 / 0
4.32.1 0 / 0
4.32.0 0 / 0
4.31.0 0 / 0
4.30.1 0 / 0
4.30.0 0 / 0
4.29.2 0 / 0
4.29.1 0 / 0
4.29.0 0 / 0
4.28.1 0 / 0
4.28.0 0 / 0
4.27.4 0 / 0
4.27.3 0 / 0
4.27.2 0 / 0
4.27.1 0 / 0
4.27.0 0 / 0
4.26.0 0 / 0
4.25.0 0 / 0
4.24.4 0 / 0
4.24.3 0 / 0
4.24.2 0 / 0
4.24.1 0 / 0
4.24.0 0 / 0
4.23.0 0 / 0
Showing 100 of 117 Next page →

v4.40.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.40.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.39.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.38.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.37.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.36.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.35.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.34.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.33.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.32.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.32.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.31.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.30.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.30.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.29.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.29.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.29.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.28.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.28.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.27.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.27.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.27.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.27.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.27.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.26.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.25.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.24.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.24.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.24.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.24.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.24.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v4.23.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.