@ademu/adc-linux-x64

Prebuilt adc daemon binary for x86_64-unknown-linux-musl, version 0.2.4. This is a platform package: it exists only so that @ademu/adc-bin can pull in the right binary via optionalDependencies.

Do not depend on this package directly — depend on @ademu/adc-bin.

Provenance (build-time verification)

bin/adc is the unmodified adc member of the GitHub release asset adc-0.2.4-x86_64-unknown-linux-musl.tar.gz from https://github.com/ademu/AdemuMLS/releases/tag/adc-v0.2.4

sha256 of the release tarball  9ff1ee8dd166e2d4186fa257a627b9b2d2fa9673e4efc77db9c827bc654e92b8
sha256 of bin/adc              2f445f0a2d673b2e9f0d0bec54ef413f069a6c7cadc0107b8f81e612b0c090f1

Before this package was generated, the release's SHA256SUMS (which lists the tarball digest) was verified against its minisign signature (SHA256SUMS.minisig, key id CEE35089367D2654 — public key committed at dev/release-signing.pub in the AdemuMLS repository) and the tarball against SHA256SUMS; the generator refuses to produce a package otherwise. Both digests are also in this package's package.json (ademu.sha256, ademu.binary_sha256).

What you can check locally is that the installed file is the one this package was generated from:

shasum -a 256 node_modules/@ademu/adc-linux-x64/bin/adc   # must print 2f445f0a2d673b2e9f0d0bec54ef413f069a6c7cadc0107b8f81e612b0c090f1

Chaining that to the signed release independently requires the release assets and dev/release-signing.pub, which are not public while the repository is private: download the tarball, verify SHA256SUMS with minisign, extract adc, and compare its digest with the line above.

License

Dual-licensed under MIT or Apache-2.0, at your option (see LICENSE-MIT and LICENSE-APACHE).