@ademu/adc-linux-arm64

Prebuilt adc daemon binary for aarch64-unknown-linux-musl, version 0.2.4. This is a platform package: it exists only so that @ademu/adc-bin can pull in the right binary via optionalDependencies.

Do not depend on this package directly — depend on @ademu/adc-bin.

Provenance (build-time verification)

bin/adc is the unmodified adc member of the GitHub release asset adc-0.2.4-aarch64-unknown-linux-musl.tar.gz from https://github.com/ademu/AdemuMLS/releases/tag/adc-v0.2.4

sha256 of the release tarball  9ce788b7f478354214d84427be07145f68ec527354bb2e5bcac98dbfe405459e
sha256 of bin/adc              99619b88aac2a5a2daaa126acd36aaccb7d597511b73ce8c0aed940003aed51d

Before this package was generated, the release's SHA256SUMS (which lists the tarball digest) was verified against its minisign signature (SHA256SUMS.minisig, key id CEE35089367D2654 — public key committed at dev/release-signing.pub in the AdemuMLS repository) and the tarball against SHA256SUMS; the generator refuses to produce a package otherwise. Both digests are also in this package's package.json (ademu.sha256, ademu.binary_sha256).

What you can check locally is that the installed file is the one this package was generated from:

shasum -a 256 node_modules/@ademu/adc-linux-arm64/bin/adc   # must print 99619b88aac2a5a2daaa126acd36aaccb7d597511b73ce8c0aed940003aed51d

Chaining that to the signed release independently requires the release assets and dev/release-signing.pub, which are not public while the repository is private: download the tarball, verify SHA256SUMS with minisign, extract adc, and compare its digest with the line above.

License

Dual-licensed under MIT or Apache-2.0, at your option (see LICENSE-MIT and LICENSE-APACHE).