Skip to content

fix(review): track lockfile entry nesting so a nested dependencies object can't hide tamper (#5837) - #6050

Closed
shin-core wants to merge 1 commit into
JSONbored:mainfrom
shin-core:fix/lockfile-tamper-nested-deps
Closed

fix(review): track lockfile entry nesting so a nested dependencies object can't hide tamper (#5837)#6050
shin-core wants to merge 1 commit into
JSONbored:mainfrom
shin-core:fix/lockfile-tamper-nested-deps

fix(review): track lockfile entry nesting so a nested dependencies ob…

d7d9171
Select commit
Loading
Failed to load commit list.
Superagent Security / Contributor trust required action Jul 15, 2026 in 4s

Contributor flagged for review

Score: 10/100 · Verdict: dangerous