@skiley/runfile
Runfile CLI — an easy-to-use, batteries-included task runner
14
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
bloodshura
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| install-scripts | install-script:postinstall | AI (install-scripts): Documented prebuilt-binary fetch from GitHub releases; consistent with CLI tool distribution pattern. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): child_process used in binary-install.js to unpack/install downloaded platform binaries; expected for this pattern. | ai |