@aj-shadow/actorjs-app 0.0.0-aj-beta.264 → 0.0.0-aj-beta.266
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/SECURITY.md +16 -0
- package/npm-shrinkwrap.json +2 -2
- package/package.json +2 -2
- package/workspace/Bundle-AppLayer-client.bld +0 -1
package/SECURITY.md
ADDED
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
# Security Policy
|
|
2
|
+
|
|
3
|
+
## Overview
|
|
4
|
+
This project intentionally uses `npm-shrinkwrap.json` to guarantee deterministic installations. This ensures that all users receive exactly the same dependency tree that has been tested, validated, and security‑reviewed.
|
|
5
|
+
|
|
6
|
+
## Daily Security Analysis
|
|
7
|
+
We perform daily security analysis on all dependencies and publish updates immediately when vulnerabilities are discovered. Every release is verified against the exact dependency set defined in the shrinkwrap file.
|
|
8
|
+
|
|
9
|
+
## Deterministic Dependency Tree
|
|
10
|
+
All releases are tested with the exact dependency tree delivered to users. This guarantees that no user ever receives an untested combination of packages, regardless of upstream changes in the npm registry.
|
|
11
|
+
|
|
12
|
+
## Known Scanner Behavior
|
|
13
|
+
Some supply‑chain scanners flag `npm-shrinkwrap.json` as “HIGH RISK”. In this project, shrinkwrap is a deliberate security and quality mechanism — not an attack vector. It is used to enforce reproducibility and prevent unverified dependency updates.
|
|
14
|
+
|
|
15
|
+
## Reporting Issues
|
|
16
|
+
Security issues can be reported via \<your contact information\>.
|
package/npm-shrinkwrap.json
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aj-shadow/actorjs-app",
|
|
3
|
-
"version": "0.0.0-aj-beta.
|
|
3
|
+
"version": "0.0.0-aj-beta.266",
|
|
4
4
|
"lockfileVersion": 3,
|
|
5
5
|
"requires": true,
|
|
6
6
|
"packages": {
|
|
7
7
|
"": {
|
|
8
8
|
"name": "@aj-shadow/actorjs-app",
|
|
9
|
-
"version": "0.0.0-aj-beta.
|
|
9
|
+
"version": "0.0.0-aj-beta.266",
|
|
10
10
|
"hasInstallScript": true,
|
|
11
11
|
"license": "MIT"
|
|
12
12
|
}
|
package/package.json
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aj-shadow/actorjs-app",
|
|
3
|
-
"version": "0.0.0-aj-beta.
|
|
3
|
+
"version": "0.0.0-aj-beta.266",
|
|
4
4
|
"shortname": "aj",
|
|
5
5
|
"longname": "actorjs",
|
|
6
6
|
"folder": "actorjs",
|
|
7
7
|
"release-step": "delivery",
|
|
8
8
|
"description": "Library used by @aj-shadow/actorjs",
|
|
9
|
-
"author": "
|
|
9
|
+
"author": "Hagnell Konsulting AB",
|
|
10
10
|
"license": "MIT",
|
|
11
11
|
"scripts": {
|
|
12
12
|
"postinstall": "node -e \"try{require('./npm-post-install.js')}catch(e){console.log(e);}\""
|
|
@@ -13,7 +13,6 @@
|
|
|
13
13
|
"dependencies": [
|
|
14
14
|
["AppLayer-client", "client"],
|
|
15
15
|
["AppLayer-cs", "cs"],
|
|
16
|
-
["z-abs-plus-services-docs", "client"],
|
|
17
16
|
["z-abs-complayer-toolversions-client", "client"],
|
|
18
17
|
["z-abs-complayer-visualizationlog-client", "client"],
|
|
19
18
|
["z-abs-complayer-visualizationsequencediagram-client", "client"],
|