T

huntedbytheirs d7fc9d45fb fix: fetcher security — fork+execve, hash verification, tar safety, CLI --help

B1: Replaced all std::system()/popen() with fork+execve — zero shell injection
B2+B3: Added sha256/sha512/md5 fields to PackageDef, parser support, actual hash comparison in verify_hash()
B4: tar --no-same-owner --no-same-permissions, zip uses unzip instead of tar
B5: Patch sha256 verified before application via -i flag (no shell redirect)
B6: kappa fetch --help now prints usage and exits 0
Also: removed dead ternary code, added <cstdlib>/<sys/wait.h>/<unistd.h>

2026-07-30 03:59:15 -04:00

examples

fix: fetcher security — fork+execve, hash verification, tar safety, CLI --help

2026-07-30 03:59:15 -04:00

include/kappa

fix: fetcher security — fork+execve, hash verification, tar safety, CLI --help

2026-07-30 03:59:15 -04:00

src

fix: fetcher security — fork+execve, hash verification, tar safety, CLI --help

2026-07-30 03:59:15 -04:00

.clang-tidy

feat: DSL parser, eval system, and project structure