
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@runner-run/linux-arm64-gnu
Advanced tools
Prebuilt runner + run aarch64-unknown-linux-gnu binaries for runner-run; selected automatically by npm, also runnable standalone via npx.
Prebuilt runner and run binaries for linux · arm64 · glibc (rustc target aarch64-unknown-linux-gnu).
The platform-specific package of runner-run.
Usually not. Install the main package and npm picks the matching binary for your platform automatically:
npm install runner-run
This package is listed in runner-run's optionalDependencies. npm resolves the one
whose os/cpu/libc matches your machine and skips the rest, so the wrapper
finds these binaries with no postinstall step. Depending on it directly pins you to a single
platform, so prefer runner-run for anything portable.
The package is a working CLI in its own right — it ships a runner bin that launches
the bundled binary, so on a matching machine it runs without the facade:
npx @runner-run/linux-arm64-gnu list
npx @runner-run/linux-arm64-gnu install -f build test
npx --package=@runner-run/linux-arm64-gnu runner run lint
Useful when you want a platform-pinned install (e.g. a locked-down CI image) without pulling the facade and its sibling platform packages into the resolution.
runner and run: prebuilt native binaries under bin/.runner.cjs: package-relative launcher backing the runner bin.Released under the same license as runner-run (see LICENSE).
FAQs
Prebuilt runner + run aarch64-unknown-linux-gnu binaries for runner-run; selected automatically by npm, also runnable standalone via npx.
The npm package @runner-run/linux-arm64-gnu receives a total of 86 weekly downloads. As such, @runner-run/linux-arm64-gnu popularity was classified as not popular.
We found that @runner-run/linux-arm64-gnu demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.