@swc/core — Greenflagged

Super-fast alternative for babel

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

kdy1

Keywords

swcswcpackbabeltypescriptrustwebpacktsc

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
dependencies	unvetted-dep:request	AI (dependencies): The `request` package is used during install to fetch prebuilt binaries; it is a well-known HTTP client and its use here is consistent with the package's install flow.	ai	2026/04/24
install-scripts	install-script:install	AI (install-scripts): @swc/core is a native Rust binding; install script fetches prebuilt binaries or builds via neon. Standard for this package.	ai	2026/04/24
phantom-deps	phantom-dep:neon-cli	AI (phantom-deps): neon-cli is used as a CLI tool in install/build scripts, not imported in JS. Expected for neon-based native bindings.	ai	2026/04/24
bogus-package	bogus-package	AI (bogus-package): @swc/core is a major ecosystem package (43M downloads); sparse metadata in early versions is not a spam signal.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-linux-x64-gnu	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-linux-x64-musl	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-win32-x64-msvc	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-linux-arm64-gnu	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-win32-ia32-msvc	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-linux-arm64-musl	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-win32-arm64-msvc	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-linux-arm-gnueabihf	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-darwin-x64	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-freebsd-x64	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-darwin-arm64	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
phantom-deps	phantom-dep:@swc/core-android-arm64	AI (phantom-deps): Platform-specific optional dependency for NAPI native binding; declared in napi config and loaded conditionally at runtime.	ai	2026/04/24
provenance	no-provenance	AI (provenance): @swc/core is a long-established, high-trust package; absence of Sigstore provenance is not a risk signal here.	ai	2026/04/24
typosquat	typosquat.levenshtein:cors	AI (typosquat): @swc/core is a major scoped package under the @swc org, not a typosquat of 'cors'. The Levenshtein match is purely coincidental and will never be a real signal for this package.	ai	2026/04/24
semgrep	semgrep:child-process-import	AI (semgrep): child_process is used only to run 'ldd --version' to detect musl libc for binary selection; hardcoded, benign, and stable for this package.	ai	2026/04/23
phantom-deps	phantom-dep:@swc/counter	AI (phantom-deps): @swc/counter is a same-org runtime dependency declared in package.json dependencies; phantom-dep detection is a false positive here.	ai	2026/04/23
install-scripts	install-script:postinstall	AI (install-scripts): @swc/core uses postinstall to select the correct platform-specific prebuilt native binary via NAPI-RS; this is the documented and stable install flow for this package.	ai	2026/04/23
semgrep	semgrep:child-process-execsync	AI (semgrep): execSync('ldd --version') is a hardcoded, benign musl detection check in binding.js; stable false positive for this native binding package.	ai	2026/04/23
semgrep	semgrep:dynamic-require	AI (semgrep): Dynamic require in index.js loads either a user-specified binding override or ./binding.js; standard NAPI-RS pattern, stable for this package.	ai	2026/04/23

Versions (showing 100 of 217)

Show 66 prereleases

Version	Deps	Published
1.2.131	14 / 37	2022-01-19
1.2.130	14 / 37	2022-01-17
1.2.129	14 / 37	2022-01-13
1.2.128	14 / 37	2022-01-11
1.2.127	14 / 37	2022-01-06
1.2.126	14 / 37	2022-01-03
1.2.125	14 / 37	2022-01-02
1.2.124	14 / 37	2021-12-29
1.2.123	14 / 37	2021-12-26
1.2.122	13 / 37	2021-12-22
1.2.121	13 / 36	2021-12-19
1.2.120	13 / 36	2021-12-13
1.2.119	13 / 33	2021-12-10
1.2.118	13 / 33	2021-12-05
1.2.117	13 / 33	2021-12-02
1.2.116	13 / 33	2021-12-01
1.2.115	13 / 33	2021-12-01
1.2.114	13 / 33	2021-11-30
1.2.113	13 / 33	2021-11-27
1.2.112	13 / 30	2021-11-24
1.2.111	13 / 31	2021-11-19
1.2.110	13 / 31	2021-11-17
1.2.109	13 / 31	2021-11-17
1.2.108	13 / 31	2021-11-11
1.2.107	13 / 30	2021-11-07
1.2.106	13 / 30	2021-10-31
1.2.105	12 / 30	2021-10-28
1.2.104	13 / 30	2021-10-27
1.2.103	13 / 30	2021-10-25
1.2.102	12 / 30	2021-10-21
1.2.101	12 / 30	2021-10-19
1.2.100	12 / 28	2021-10-19
1.2.99	12 / 28	2021-10-17
1.2.98	12 / 28	2021-10-16
1.2.97	12 / 28	2021-10-15
1.2.96	12 / 26	2021-10-14
1.2.95	13 / 26	2021-10-09
1.2.94	13 / 26	2021-10-08
1.2.93	13 / 26	2021-10-03
1.2.92	13 / 26	2021-09-28
1.2.91	13 / 26	2021-09-25
1.2.90	13 / 26	2021-09-23
1.2.89	13 / 26	2021-09-21
1.2.88	13 / 26	2021-09-16
1.2.87	13 / 26	2021-09-14
1.2.85	13 / 26	2021-09-09
1.2.84	13 / 26	2021-09-01
1.2.83	13 / 26	2021-08-27
1.2.82	13 / 26	2021-08-25
1.2.81	13 / 26	2021-08-24
1.2.80	13 / 26	2021-08-19
1.2.79	13 / 26	2021-08-19
1.2.78	13 / 26	2021-08-16
1.2.77	13 / 26	2021-08-13
1.2.76	13 / 26	2021-08-10
1.2.75	13 / 26	2021-08-08
1.2.74	13 / 26	2021-08-04
1.2.73	13 / 26	2021-08-04
1.2.71	13 / 25	2021-08-02
1.2.70	13 / 25	2021-07-31
1.2.69	13 / 25	2021-07-31
1.2.68	13 / 25	2021-07-31
1.2.67	13 / 25	2021-07-31
1.2.66	13 / 25	2021-07-20
1.2.65	13 / 25	2021-07-18
1.2.64	13 / 25	2021-07-14
1.2.63	13 / 25	2021-07-06
1.2.62	13 / 24	2021-06-27
1.2.61	13 / 24	2021-06-16
1.2.60	13 / 24	2021-06-07
1.2.59	11 / 24	2021-05-30
1.2.58	10 / 23	2021-05-21
1.2.57	10 / 23	2021-05-11
1.2.55	10 / 23	2021-05-07
1.2.54	10 / 22	2021-04-19
1.2.52	10 / 21	2021-04-11
1.2.51	10 / 21	2021-03-28
1.2.50	10 / 21	2021-03-03
1.2.49	10 / 21	2021-02-23
1.2.48	10 / 21	2021-02-22
1.2.47	10 / 21	2021-01-31
1.2.46	9 / 20	2021-01-24
1.2.45	9 / 20	2021-01-14
1.2.44	9 / 20	2021-01-11
1.2.43	9 / 20	2020-12-30
1.2.40	4 / 20	2020-12-03
1.2.39	4 / 20	2020-11-22
1.2.38	4 / 20	2020-11-08
1.2.37	4 / 20	2020-10-29
1.2.36	4 / 19	2020-10-06
1.2.35	4 / 19	2020-10-04
1.2.34	4 / 19	2020-09-24
1.2.33	4 / 19	2020-09-24
1.2.32	4 / 19	2020-09-22
1.2.31	4 / 19	2020-09-22
1.2.30	4 / 19	2020-09-18
1.2.28	4 / 19	2020-09-13
1.2.26	4 / 19	2020-09-11
1.2.25	4 / 19	2020-09-11
1.2.24	4 / 19	2020-09-08

Showing 100 of 217 Next page →