SBDeveloper/medley
Watch
1
0
Fork
You've already forked medley
 0
Code Issues 16 Pull requests Releases 13 Activity Actions

Refuse plain http:// registry packages #81

New issue
Open
opened 2026-10-15 21:12:09 +02:00 by SBDeveloper · 0 comments
SBDeveloper commented 2026-10-15 21:12:09 +02:00
Owner

Registry packages are SHA-256 checked, but http:// URLs are still accepted. Tests serve the registry over http. Needs triage.

Registry packages are SHA-256 checked, but `http://` URLs are still accepted. Tests serve the registry over http. Needs triage.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
prototype/ma-live-input
v0.6.0
v0.5.3
v0.5.2
v0.5.1
v0.5.0
v0.4.1
v0.4.0
v0.3.1
v0.3.2
v0.3.0
v0.2.1
v0.2.0
v0.1.4
v0.1.3
v0.1.2
v0.1.1
v0.1.0
Labels
Clear labels   
bug
Something is broken

  
enhancement
New feature or improvement

  
needs-info
Waiting on reporter for more information

  
needs-triage
Maintainer needs to evaluate this issue

  
ready-for-agent
Fully specified, ready for an AFK agent

  
ready-for-human
Requires human implementation

  
security
Security-related fix

  
wontfix
Will not be actioned

No labels
bug
enhancement
needs-info
needs-triage
ready-for-agent
ready-for-human
security
wontfix
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
SBDeveloper/medley#81
No description provided.