Skip to content
Pack registry

runtime/node

Node.js runtime policy: the npm registry, Node downloads, and GitHub release assets for native-module prebuilds.

Reference Kind Latest Architecture Size Publisher
runtime/node policy 1.0.0 — — tinylabscom/mvm-packs (official)

Use

Section titled “Use”
Terminal window
mvmctl pull runtime/node
mvmctl pull runtime/node@1.0.0

This pack is a policy and is not runnable: it has no kernel, root filesystem or entrypoint.

Versions

Section titled “Versions”
Version Manifest SHA-256 Revoked
1.0.0 e10d2c7f070e00a1b5d8c713568c0aebe608cc4e346c091a4cb25057ffd25bd3 yes

Policy declarations (1.0.0)

Section titled “Policy declarations (1.0.0)”

Included groups name other policies; they do not describe every effective permission.

Declaration Value
Direct network allow registry.npmjs.org:443
Direct network allow nodejs.org:443
Direct network allow github.com:443
Direct network allow objects.githubusercontent.com:443

Secret bindings

Section titled “Secret bindings”

Binding names and allowed hosts only; a binding is not proof that a secret is required, and no secret values are stored here.

Binding Allowed hosts
None declared —

Publisher

Section titled “Publisher”

Each manifest is signed keyless; manifest.sigstore.json binds it to a workflow identity (issuer https://token.actions.githubusercontent.com). Identities each version can be verified under:

  • 1.0.0: https://github.com/tinylabscom/mvm-packs/.github/workflows/publish.yml@refs/heads/main