Powered by SafeDepPowered by SafeDepEmbedded executable workerd aligns with package name and verified provenance suggests safe build. Extension mismatch is low confidence.
No verification record available.
The package contains an embedded executable named workerd which is consistent with the package name @cloudflare/workerd-darwin-64 and the project cloudflare/workerd. The extension mismatch is a low confidence indicator and does not provide sufficient evidence of maliciousness. The SLSA provenance is verified, indicating a secure build process.