Zoltan Kochan 230df57aa5 fix(bins.resolver): reject reserved manifest bin names (#12289) ...

Manifest bin keys "", ".", "..", and scoped forms such as "@scope/.."
passed the bin-name guard because encodeURIComponent leaves them
unchanged. When joined to the global bin directory during global
remove/update/add operations, "." resolves to the bin directory itself
and ".." to its parent, which removeBin then recursively deletes.

Reject empty, ".", and ".." bin names after scope stripping in both the
TypeScript resolver and the pacquet cmd-shim bin resolver.

2026-06-09 20:20:56 +02:00

..

index.ts

fix(bins.resolver): reject reserved manifest bin names (#12289)

2026-06-09 20:20:56 +02:00