Skip to content

登记 369431.kuaimai-erp 1.0.1(安全重发) - #5

Closed
369431 wants to merge 1 commit into
PackingProof:mainfrom
369431:submit/369431-kuaimai-erp-1.0.1
Closed

登记 369431.kuaimai-erp 1.0.1(安全重发)#5
369431 wants to merge 1 commit into
PackingProof:mainfrom
369431:submit/369431-kuaimai-erp-1.0.1

Conversation

@369431

@369431 369431 commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

新版本登记

  • 扩展: 369431.kuaimai-erp 1.0.1(external-adapter)
  • 原因: 1.0.0 的 Release 资产误包含本机 .env/.state.json\(快麦 API 凭据),原 Release 已删除、凭据已轮换。1.0.1 打包已验证不含任何本机秘密
  • 建议: 对 1.0.0 版本记录发布撤回公告(reasonCode 可参考 credential-leak / replacedBy 1.0.1),避免用户安装泄露版本
  • Release: https://github.com/369431/PackingProof-KuaimaiERP/releases/tag/v1.0.1

验证

  • npm test(21/21 通过)
  • npm run validate(Schema 校验通过)
  • npm run generate + git diff(registry 与源数据一致)

1.0.0 的 Release 资产误包含本机 .env/.state.json(快麦 API 凭据),
已删除该 Release 并轮换处理;1.0.1 为安全重发版本,打包已验证不含
任何本机秘密。建议维护者对 1.0.0 版本记录发布撤回公告(reasonCode
可参考 credential-leak),避免用户安装到泄露版本。
@m-RNA

m-RNA commented Aug 31, 2026

Copy link
Copy Markdown
Member

赞!

我忘记打开推送了,没注意看到,我这边已经更新登记了,先关闭了

@m-RNA m-RNA closed this Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants