LayerFault/dependency-alt-index-invalid
Updated
LF Security Corpus: Dependency & Supply Chain
Pinned, mutable, alternate-index, hook and lockfile supply-chain challenges.
Note LF-CH-DEPX-0002: Dependency alt index invalid.
LayerFault/dependency-clean-pinned-control
UpdatedNote LF-CH-DEPX-0001: Dependency clean pinned control.
LayerFault/dependency-confusable-package-name
UpdatedNote LF-CH-DEPX-0011: Dependency confusable package name.
LayerFault/dependency-direct-url-invalid
UpdatedNote LF-CH-DEPX-0003: Dependency direct url invalid.
LayerFault/dependency-insecure-transport-invalid
UpdatedNote LF-CH-DEPX-0004: Dependency insecure transport invalid.
LayerFault/dependency-local-path
UpdatedNote LF-CH-DEPX-0005: Dependency local path.
LayerFault/dependency-lockfile-manifest-disagreement
UpdatedNote LF-CH-DEPX-0012: Dependency lockfile manifest disagreement.
LayerFault/dependency-npm-install-hook
UpdatedNote LF-CH-DEPX-0010: Dependency npm install hook.
LayerFault/dependency-path-escape
UpdatedNote LF-CH-DEPX-0006: Dependency path escape.
LayerFault/dependency-python-build-backend
UpdatedNote LF-CH-DEPX-0009: Dependency python build backend.
LayerFault/dependency-vcs-mutable-ref
UpdatedNote LF-CH-DEPX-0008: Dependency vcs mutable ref.
LayerFault/dependency-vcs-pinned-control
UpdatedNote LF-CH-DEPX-0007: Dependency vcs pinned control.