3 people b40af6c294 fix(security): command injection in npm postinstall + weak RNG fallback (#837) ...

- Replace `execSync` with `execFileSync` in npm install script to prevent command injection.
- Pass PowerShell paths via environment variables to avoid shell metacharacter interpolation.
- Add `-NoProfile` and `-NonInteractive` flags to PowerShell extraction for cleaner installs.
- Upgrade `makeAccountId` to prioritize `crypto.getRandomValues` over `Math.random` for suffixes.
- Update internal thread title logic to import `collapse_whitespace` from the correct location.

Co-authored-by: Steven Enamakel <enamakel@tinyhumans.ai>

2026-04-23 22:16:44 -07:00

..

bin

Feat:package manager channels (brew, apt, npm ) (#166)

2026-04-01 19:30:55 +05:30

.npmignore

Feat:package manager channels (brew, apt, npm ) (#166)

2026-04-01 19:30:55 +05:30

install.js

fix(security): command injection in npm postinstall + weak RNG fallback (#837)

2026-04-23 22:16:44 -07:00

package.json

Feat:package manager channels (brew, apt, npm ) (#166)

2026-04-01 19:30:55 +05:30