← Home

@signageos/file

npm Repository Homepage
2
Versions
—
License
Yes
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

misak113kytartpetrbilysignageos.iovasekboch

Keywords

filelinuxwindowswrappermime-typedetectiondetermine

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
install-scripts install-script:postinstall AI (install-scripts): Postinstall conditionally downloads a Windows binary via run-script-os; legitimate cross-platform pattern for this file-command wrapper. ai
typosquat typosquat.levenshtein:vite AI (typosquat): Scoped @signageos org package; no relation to vite. Levenshtein match is spurious. ai
phantom-deps phantom-dep:run-script-os AI (phantom-deps): run-script-os is used in postinstall script, not imported in code; correctly declared as a runtime dep. ai

Versions (showing 2 of 2)

Version Deps Published
2.0.1 5 / 13
2.0.0 5 / 13