milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
AikidoSec-safe-chain/packages/safe-chain/src/packagemanager/pip
History
Uriel Corfa cb9f3ee145
Do not rely on asynchronous import of child_process. 
Importing child_process asynchronously causes loader errors when running the
binary dist:

$ ./dist/safe-chain python --safe-chain-logging=verbose
Safe-chain: Bypassing safe-chain for non-pip invocation: python
Failed to check for malicious packages: A dynamic import callback was not specified.
$

Relying on a regular import does not cause this issue. There is no obvious
reason for this import to be dynamic (in particular, there are no tests using
this to mock the spawn function), so let's simplify.
2025-12-12 09:09:52 +01:00
..
createPackageManager.js Refactor PyPI logic and cleanup 2025-12-04 12:37:59 -08:00
createPackageManager.spec.js Fix comments 2025-11-05 09:18:18 -08:00
pipSettings.js Refactor PyPI logic and cleanup 2025-12-04 12:37:59 -08:00
runPipCommand.js Do not rely on asynchronous import of child_process. 2025-12-12 09:09:52 +01:00
runPipCommand.spec.js Add a unit test for shouldBypassSafeChain 2025-12-12 09:09:52 +01:00