overview / findings / the install suite proved the published path on a…
the package ships a postinstall that builds from source with clang++ or g++ when no platform package matches, and the README promises a prebuilt binary to someone who has neither. section 6 installs into a second clean prefix with cc, gcc, g++, clang, clang++, c++, make, cmake and ld replaced by shims that log and exit 127. install succeeds, the shim log is empty, and rabadon --version prints 0.2.0 from a real Mach-O binary out of the tarball.
| field | value |
|---|---|
| repository | rabadon |
| file | native/npm_install_test.sh |
| status | fixed |
| found | 2026-08-02 |
A finding without a command that demonstrates it is an opinion, and site/build.py drops it. This one is also listed on the catches page.