Sparsh b9b3ec6a63 fix(security): resolve CodeQL findings in package.mjs build script ... TOCTOU (CWE-367): fs.statSync(entry.from).isDirectory() was called before mirrorDirectory/cpSync without error handling. If the path disappears between stat and use, the subsequent operation throws unhandled. Wrap in try/catch and continue on error. Indirect uncontrolled command line (CWE-78): appBuilderLibVersion is read from desktopPackageLock (an external file) and embedded directly in an npm pack CLI argument. Validate it matches a semver pattern before use to prevent injection via a compromised lockfile.		2026-05-19 01:16:26 +05:30
..
after-pack.mjs	feat(build): implement afterPack hook to copy node.exe for Windows builds	2026-05-11 21:44:18 +05:30
ensure-gitnexus-runtime.mjs	fix(desktop): pin transitive deps in runtime repair via npm ci	2026-05-19 01:16:24 +05:30
package.mjs	fix(security): resolve CodeQL findings in package.mjs build script	2026-05-19 01:16:26 +05:30
smoke-unpacked.mjs	feat: add validation job to GitHub Actions for desktop packaging	2026-04-24 13:45:23 +05:30