Sparsh 377a96ffd5 fix(desktop): pin transitive deps in runtime repair via npm ci ... repairGitNexusPackages used npm install --no-package-lock in a temp directory, resolving all transitive dependencies freely from the live npm registry. Each packaged build could therefore embed a different transitive dependency graph, making builds non-reproducible and vulnerable to a compromised transitive package. Copy gitnexus/package-lock.json into the temp directory before running npm ci so transitive deps are pinned to the versions already resolved during workspace installation.		2026-05-19 01:16:24 +05:30
..
after-pack.mjs	feat(build): implement afterPack hook to copy node.exe for Windows builds	2026-05-11 21:44:18 +05:30
ensure-gitnexus-runtime.mjs	fix(desktop): pin transitive deps in runtime repair via npm ci	2026-05-19 01:16:24 +05:30
package.mjs	Merge branch 'main' into feat/Desktop-app	2026-05-15 03:39:22 +05:30
smoke-unpacked.mjs	feat: add validation job to GitHub Actions for desktop packaging	2026-04-24 13:45:23 +05:30