Repository navigation

Read BOM composer locks and pin that no lock pin drives a download - #2017

Open

Mikola Lysenko (mikolalysenko) wants to merge 3 commits into

mainfrom

fix/pristine-fetch-and-composer-bom

Open

Read BOM composer locks and pin that no lock pin drives a download#2017
Mikola Lysenko (mikolalysenko) wants to merge 3 commits into
mainfrom
fix/pristine-fetch-and-composer-bom

Commits on Nov 4, 2026
- Read BOM composer locks and pin the no-lock-download guard
  
  Mikola Lysenko (mikolalysenko)
  and
  Claude (claude)
  committed
  dc39f60
Commits on Nov 6, 2026
- Fail closed on unparseable composer locks; tighten the download guard
  
  Mikola Lysenko (mikolalysenko)
  and
  Claude (claude)
  committed
  75b6ca3
- Bound test-only list items in the source scan; gate composer refusal
  Claude (claude)
  committed
  22544e7