isolated-vm
Supply chain provenance
Status for the latest visible version.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:node-gyp-build | AI (dependencies): node-gyp-build is the standard prebuild loader used by virtually all native Node.js addons. | ai | |
| phantom-deps | phantom-dep:prebuild-install | AI (phantom-deps): prebuild-install is a declared runtime dep used implicitly by the install script; standard pattern for native bindings. | ai | |
| install-scripts | install-script:install | AI (install-scripts): Standard node-gyp-build prebuilt-binary fetch with fallback rebuild; expected for this native addon. | ai | |
| npm-metadata | bundled-binaries | AI (npm-metadata): Prebuilds are the documented distribution mechanism for this native addon via prebuildify. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): env-spread in run-prebuild.js is a build script that passes env to child processes; not a runtime secret leak. | ai |
Versions (showing 5 of 5)
| Version | Deps | Published |
|---|---|---|
| 7.0.0 | 1 / 2 | |
| 6.1.2 | 1 / 2 | |
| 6.0.2 | 1 / 2 | |
| 6.0.1 | 1 / 2 | |
| 6.0.0 | 1 / 2 |
v7.0.0
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.1.2
4 findingsScript: node-gyp-build || node-gyp rebuild --release -j max
Package contains compiled binaries that could be backdoors: • prebuilds/linux-arm64/isolated-vm.abi127.glibc.node • prebuilds/linux-x64/isolated-vm.abi127.glibc.node • prebuilds/linux-arm64/isolated-vm.abi127.musl.node • prebuilds/linux-x64/isolated-vm.abi127.musl.node • prebuilds/darwin-arm64/isolated-vm.abi127.node • prebuilds/win32-x64/isolated-vm.abi127.node • prebuilds/linux-arm64/isolated-vm.abi137.glibc.node • prebuilds/linux-x64/isolated-vm.abi137.glibc.node • prebuilds/linux-arm64/isolated-vm.abi137.musl.node • prebuilds/linux-x64/isolated-vm.abi137.musl.node ... and 2 more
Spreading entire process.env into an object — may capture all secrets Source: https://github.com/laverdet/isolated-vm/blob/15bcfc949e9ebfe61c35c75074d2e5124abb8031/scripts/run-prebuild.js#L19 17 | } 18 | > 19 | const env = { 20 | ...process.env, 21 | MAKEFLAGS: `-j${os.cpus().length}`,
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v6.0.2
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v6.0.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v6.0.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.