Adam Moussa
0898fb50a9
Read-only checker on the Phase-0 substrate: scans $MIRROR_DIR mirrors for pinned deps (requirements/poetry/Pipfile/package-lock/yarn/csproj across PyPI/npm/NuGet), cross-refs OSV querybatch (live) or an offline advisory fixture (canary). Mode-600 reports, ALARM-only, --canary asserts 2 planted vulns (jinja2 2.11.2, lodash 4.17.15). Complements Dependabot. Not provisioned. |
||
|---|---|---|
| .. | ||
| applypatch-msg.sample | ||
| commit-msg.sample | ||
| fsmonitor-watchman.sample | ||
| post-update.sample | ||
| pre-applypatch.sample | ||
| pre-commit.sample | ||
| pre-merge-commit.sample | ||
| pre-push.sample | ||
| pre-rebase.sample | ||
| pre-receive.sample | ||
| prepare-commit-msg.sample | ||
| push-to-checkout.sample | ||
| sendemail-validate.sample | ||
| update.sample | ||