node-av
3
Versions
—
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
seydx
Keywords
nodeffmpegavlibavbindingswhisperbinarywindowslinuxdarwinx64arm64static
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| install-scripts | install-script:postinstall | AI (install-scripts): Runs local dist/ffmpeg/install.js to set up FFmpeg binaries; standard native binding install pattern. | ai | |
| install-scripts | install-script:install | AI (install-scripts): Runs local install/check.js to verify native deps; standard native binding check pattern. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Spreads process.env into spawnSync to inherit environment while adding PKG_CONFIG_PATH; benign build-tool pattern. | ai |