
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
# With npm
sudo npm install @chriscates/llvmvm -g
# With yarn
yarn global add @chriscates/llvmvm
# llvmvm help output
llvmvm --help
# Get list of all available versions of llvm
llvmvm --scan
# Get specific OSes for a selected version
llvmvm --scanv 45
# Download and Install a specific version of LLVM
llvmvm --install --version 45 --binary 15
Assuming you have Typescript Compiler installed for Node.js... All you need to do is run:
# To build the scripts
yarn build
# To test the script itself
yarn start --help
This project pulls versions from https://llvm.org/
. llvmvm will always be up to date... Unless llvm.org migrates to a different website.
Make sure to verbosely specify the OS you want to install llvm for.
MIT Licensed :heart:
FAQs
LLVMVM Manager and Downloader
The npm package llvmvm receives a total of 0 weekly downloads. As such, llvmvm popularity was classified as not popular.
We found that llvmvm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.