@esbuild/linux-x64
The Linux 64-bit binary for esbuild, a JavaScript bundler.
11
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
esbuild
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): esbuild intentionally migrated npm publishing to GitHub Actions CI/CD. SLSA provenance attestation confirms the build integrity. This transition is stable and expected for all future esbuild releases. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): evanw's removal as listed maintainer reflects the shift to automated GitHub Actions publishing for esbuild. Consistent with SLSA-attested CI/CD pipeline; not a takeover signal. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): bin/esbuild is the sole purpose of this platform-specific package. Bundled binary is expected and legitimate for @esbuild/linux-x64. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Platform-specific binary sub-packages legitimately have no deps, minimal README, and no keywords. These signals are false positives for this package type. | ai |