prpm 1.1.13 → 1.1.14

package/dist/index.js

@@ -113,6 +113,16 @@ function setPackageIntegrity(lockfile, packageId, tarballBuffer, format) {
   const hash = (0, import_crypto.createHash)("sha256").update(tarballBuffer).digest("hex");
   lockfile.packages[lockfileKey].integrity = `sha256-${hash}`;
 }
+function verifyPackageIntegrity(lockfile, packageId, tarballBuffer, format) {
+  const lockfileKey = getLockfileKey(packageId, format);
+  const pkg = lockfile.packages[lockfileKey];
+  if (!pkg || !pkg.integrity) {
+    return false;
+  }
+  const hash = (0, import_crypto.createHash)("sha256").update(tarballBuffer).digest("hex");
+  const expectedHash = pkg.integrity.replace("sha256-", "");
+  return hash === expectedHash;
+}
 function getLockedVersion(lockfile, packageId, format) {
   var _a;
   if (!lockfile) {
@@ -13989,6 +13999,26 @@ async function handleInstall(packageSpec, options) {
     }
     console.log(`   \u2B07\uFE0F  Downloading...`);
     const tarball = await client.downloadPackage(tarballUrl);
+    const lockfileKeyForVerification = getLockfileKey(packageId, targetFormat);
+    const existingEntry = lockfile == null ? void 0 : lockfile.packages[lockfileKeyForVerification];
+    if (existingEntry == null ? void 0 : existingEntry.integrity) {
+      console.log(`   \u{1F512} Verifying integrity...`);
+      const isValid = verifyPackageIntegrity(lockfile, packageId, tarball, targetFormat);
+      if (!isValid) {
+        throw new CLIError(
+          `\u274C Integrity verification failed for ${packageId}
+
+The downloaded package does not match the expected hash from prpm.lock.
+This could indicate:
+  \u2022 A corrupted download
+  \u2022 A modified package on the registry
+  \u2022 A potential security issue
+
+\u{1F4A1} To force installation anyway, delete the package from prpm.lock and retry.`
+        );
+      }
+      console.log(`   \u2713 Integrity verified`);
+    }
     console.log(`   \u{1F4C2} Extracting...`);
     const effectiveFormat = format || pkg.format;
     const effectiveSubtype = options.subtype || pkg.subtype;
@@ -14452,6 +14482,18 @@ ${afterFrontmatter}`;
     await telemetry.shutdown();
   }
 }
+function isPathSafe(targetDir, filePath) {
+  const resolvedPath = import_path11.default.resolve(targetDir, filePath);
+  const resolvedTarget = import_path11.default.resolve(targetDir);
+  return resolvedPath.startsWith(resolvedTarget + import_path11.default.sep) || resolvedPath === resolvedTarget;
+}
+function hasUnsafePathPatterns(filePath) {
+  if (filePath.includes("..")) return true;
+  if (filePath.startsWith("/")) return true;
+  if (/^[a-zA-Z]:/.test(filePath)) return true;
+  if (filePath.includes("\0")) return true;
+  return false;
+}
 async function extractTarball(tarball, packageId) {
   let decompressed;
   try {
@@ -14486,7 +14528,29 @@ async function extractTarball(tarball, packageId) {
   try {
     const extract2 = tar.extract({
       cwd: tmpDir,
-      strict: false
+      strict: true,
+      // Enable strict mode to reject malformed archives
+      // Security: filter out dangerous entries before extraction
+      filter: (entryPath, entry) => {
+        const entryType = "type" in entry ? entry.type : null;
+        if (entryType === "SymbolicLink" || entryType === "Link") {
+          console.warn(`   \u26A0\uFE0F  Blocked symlink in package: ${entryPath}`);
+          return false;
+        }
+        if ("isSymbolicLink" in entry && entry.isSymbolicLink()) {
+          console.warn(`   \u26A0\uFE0F  Blocked symlink in package: ${entryPath}`);
+          return false;
+        }
+        if (hasUnsafePathPatterns(entryPath)) {
+          console.warn(`   \u26A0\uFE0F  Blocked unsafe path in package: ${entryPath}`);
+          return false;
+        }
+        if (!isPathSafe(tmpDir, entryPath)) {
+          console.warn(`   \u26A0\uFE0F  Blocked path traversal attempt: ${entryPath}`);
+          return false;
+        }
+        return true;
+      }
     });
     await (0, import_promises.pipeline)(import_stream.Readable.from(decompressed), extract2);
     const extractedFiles = await collectExtractedFiles(tmpDir, excludedNames, import_promises2.default);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prpm",
-  "version": "1.1.13",
+  "version": "1.1.14",
   "description": "Prompt Package Manager CLI - Install and manage prompt-based files",
   "main": "dist/index.js",
   "bin": {
@@ -45,9 +45,9 @@
   "license": "MIT",
   "dependencies": {
     "@octokit/rest": "^22.0.0",
-    "@pr-pm/converters": "^1.1.13",
-    "@pr-pm/registry-client": "^2.1.13",
-    "@pr-pm/types": "^1.1.13",
+    "@pr-pm/converters": "^1.1.14",
+    "@pr-pm/registry-client": "^2.1.14",
+    "@pr-pm/types": "^1.1.14",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "commander": "^11.1.0",