starred/orca
1
0
Fork 0
mirror of https://github.com/stablyai/orca.git synced 2026-09-27 08:02:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,721 Commits 8,096 Branches 1,113 Tags
73be7f5acd005dfd780c8b0e93de91fd44dd50ba
Commit Graph
2 Commits
Author SHA1 Message Date
Jinwoo-H 8f89b31129 fix(scripts): fold dot segments before matching node_modules/.bin 
The predicate joins call arguments textually, so a literal '..' segment hid a
path that resolves into node_modules/.bin at runtime. Folds '.' and '..' (and
Windows separators) first. A '..' that genuinely escapes .bin still does not
match.

Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb
 2026-09-12 14:05:35 -04:00
Jinwoo-H 1ebabca913 Widen Windows shim ratchet to detect package bin spawns 
Follow local program expressions into node_modules/.bin while preserving the existing literal check, roots, and allow-list. Document static-analysis limits and cover unsafe and resolver-based invocations.

Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb
 2026-09-12 01:31:45 -04:00