bestzip
6
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
nfriedlypeacelampei
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:child-process-import | AI (semgrep): Package's documented purpose is to invoke OS zip via child_process; stable across versions. | ai | |
| semgrep | semgrep:child-process-spawn | AI (semgrep): Spawning the system zip command is the core functionality of this package. | ai |