This repository was archived by the owner on Nov 5, 2024. It is now read-only.
This repository was archived by the owner on Nov 5, 2024. It is now read-only.
Security Concern about downloading packages from github #95
Description
Context:
DOWNLOAD https://raw.githubusercontent.com/c9/install/master/packages/*
Problem:
- Download is not locked down to a particular revision (
master) - Download integrity is not verified.
I am no security expert but I would be happy to elaborate on why these are problems if desired.