This repository has been archived by the owner on May 22, 2022. It is now read-only.

secure dependency download #17

Open

graingert opened this issue Jun 30, 2017 · 0 comments

graingert commented Jun 30, 2017

akin to yarn.lock include the hash of the downloaded package in the sbt.lock file, then verify it again on install.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.