fix: avoid shell interpolation in postinstall codesign - #87

Merged

abasiri merged 3 commits into

doctly:mainfrom

anupamme:fix-repo-switchboard-command-injection-postinstall

Sep 5, 2026

Commits on Aug 2, 2026

fix: javascript.lang.security.detect-child-process.detect-child-process security vulnerability
anupamme
committed
3c80fa2

Commits on Sep 5, 2026

fix: restore filename traversal, keep only the execFileSync fix

anupamme
and
claude
committed
669abd3
test: make postinstall regression coverage portable to Windows
abasiri
committed
3ba1600