@utoo/pack-linux-x64-gnu MIT 11 versions

@utoo/pack-linux-x64-gnu

npm Repository Homepage

This is the **x86_64-unknown-linux-gnu** binary for `@utoo/pack`

11

Versions

MIT

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

afc163elrrrrrrrxusd320zoomdong07

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
bogus-package	bogus-package	AI (bogus-package): Platform-specific napi binary package; empty deps/README/tiny-payload signals are inherent to prebuilt .node sidecars.	ai	2026/04/29

Versions (showing 11 of 11)

Version	Deps	Published
1.4.28	0 / 0	2026-07-21
1.4.27	0 / 0	2026-07-17
1.4.26	0 / 0	2026-07-15
1.4.25	0 / 0	2026-07-15
1.4.24	0 / 0	2026-07-13
1.4.23	0 / 0	2026-07-10
1.4.22	0 / 0	2026-07-08
1.4.21	0 / 0	2026-07-08
1.4.20	0 / 0	2026-07-07
1.4.19	0 / 0	2026-07-06
1.4.18	0 / 0	2026-07-03

v1.4.28

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.27

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.26

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.25

2 findings

HIGH Low-value / spam package indicators (5 signals, score 8) bogus-package

[Reject — re-review on republish] (prior reject: AI (bogus-package): SPAM-FLAGGED publisher with 401 rejected packages; all spam signals present across every version of this package.) Matched 5 signal(s), weighted score 8: • [S_KNOWN_SPAM_PUBLISHER] Maintainer(s) previously flagged as spam: elrrrrrrr. • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared. • [S_TINY_PAYLOAD] Tiny payload: 0 code file(s), 507 bytes total.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.24

2 findings

HIGH Low-value / spam package indicators (5 signals, score 8) bogus-package

[Reject — re-review on republish] (prior reject: AI (bogus-package): SPAM-FLAGGED publisher with 401 rejected packages; all spam signals present across every version of this package.) Matched 5 signal(s), weighted score 8: • [S_KNOWN_SPAM_PUBLISHER] Maintainer(s) previously flagged as spam: elrrrrrrr. • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared. • [S_TINY_PAYLOAD] Tiny payload: 0 code file(s), 507 bytes total.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.23

2 findings

HIGH Low-value / spam package indicators (5 signals, score 8) bogus-package

[Reject — re-review on republish] (prior reject: AI (bogus-package): SPAM-FLAGGED publisher with 401 rejected packages; all spam signals present across every version of this package.) Matched 5 signal(s), weighted score 8: • [S_KNOWN_SPAM_PUBLISHER] Maintainer(s) previously flagged as spam: elrrrrrrr. • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared. • [S_TINY_PAYLOAD] Tiny payload: 0 code file(s), 507 bytes total.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.22

2 findings

HIGH Low-value / spam package indicators (5 signals, score 8) bogus-package

[Reject — re-review on republish] (prior reject: AI (bogus-package): SPAM-FLAGGED publisher with 401 rejected packages; all spam signals present across every version of this package.) Matched 5 signal(s), weighted score 8: • [S_KNOWN_SPAM_PUBLISHER] Maintainer(s) previously flagged as spam: elrrrrrrr. • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared. • [S_TINY_PAYLOAD] Tiny payload: 0 code file(s), 507 bytes total.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.21

2 findings

HIGH Low-value / spam package indicators (5 signals, score 8) bogus-package

[Reject — re-review on republish] (prior reject: AI (bogus-package): SPAM-FLAGGED publisher with 401 rejected packages; all spam signals present across every version of this package.) Matched 5 signal(s), weighted score 8: • [S_KNOWN_SPAM_PUBLISHER] Maintainer(s) previously flagged as spam: elrrrrrrr. • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared. • [S_TINY_PAYLOAD] Tiny payload: 0 code file(s), 507 bytes total.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.20

2 findings

HIGH Low-value / spam package indicators (5 signals, score 8) bogus-package

[Reject — re-review on republish] (prior reject: AI (bogus-package): SPAM-FLAGGED publisher with 401 rejected packages; all spam signals present across every version of this package.) Matched 5 signal(s), weighted score 8: • [S_KNOWN_SPAM_PUBLISHER] Maintainer(s) previously flagged as spam: elrrrrrrr. • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared. • [S_TINY_PAYLOAD] Tiny payload: 0 code file(s), 507 bytes total.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.19

2 findings

HIGH Low-value / spam package indicators (5 signals, score 8) bogus-package

[Reject — re-review on republish] (prior reject: AI (bogus-package): SPAM-FLAGGED publisher with 401 rejected packages; all spam signals present across every version of this package.) Matched 5 signal(s), weighted score 8: • [S_KNOWN_SPAM_PUBLISHER] Maintainer(s) previously flagged as spam: elrrrrrrr. • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared. • [S_TINY_PAYLOAD] Tiny payload: 0 code file(s), 507 bytes total.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.4.18

2 findings

HIGH Low-value / spam package indicators (5 signals, score 8) bogus-package

[Reject — re-review on republish] (prior reject: AI (bogus-package): SPAM-FLAGGED publisher with 401 rejected packages; all spam signals present across every version of this package.) Matched 5 signal(s), weighted score 8: • [S_KNOWN_SPAM_PUBLISHER] Maintainer(s) previously flagged as spam: elrrrrrrr. • [S_README_NO_CODE] Short README with no code block, no install instructions, and no usage/API section. • [S_NO_KEYWORDS] No keywords declared. • [S_NO_DEPS] No runtime, dev, peer, or optional dependencies declared. • [S_TINY_PAYLOAD] Tiny payload: 0 code file(s), 507 bytes total.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.