supply-chain-security

【开发与工程】Activate when reviewing or modifying dependency resolution, lockfile schema, package downloaders, signature/integrity checks, file integration cleanup, or anything that could expose APM to dependency confusion, typosquatting, malicious packages, or token leakage.

独立 GitHub 快照 · 自动分类 · 以原作者文档为准