Source/build provenance for node-addon-require-builtin 0.1.4 Darwin ARM64

[liangfa628]

We are reviewing the published node-addon-require-builtin-darwin-arm64@0.1.4 package used by DSH. Could you point us to the corresponding source repository and immutable revision, build recipe/toolchain, and embedded dependency inventory or SBOM for prebuilt/darwin-arm64-napi-v9.node? Its SHA-256 is f7834c32235b09b4daafcd922036f49546bb232dd2b3d358400eef1d88ce79f5. The published package README says native sources are not shipped; the version metadata we checked does not identify a repository, gitHead or build attestation. We are asking for provenance information, not reporting a confirmed vulnerability. If this is maintained separately, a link to the appropriate public project or documentation would help. Thank you.