Repository navigation
Haps 0.1.14 asks you to confirm the publisher before installing a package by its bare name.
The prompt shows the package version, full publisher key, social relationship, and attestations. Enter cancels by default, before any audit, build, or installation starts. Explicit publisher/package installs and updates to an installed package do not add this prompt. Selecting a publisher from the existing chooser needs no second confirmation.
Automation change: non-interactive and JSON installs now require an explicit publisher even when only one matches. A bare name returns publisher_confirmation_required with the candidate release details. The --allow-unaudited flag does not skip publisher confirmation.
Native bundles are provided for Linux x86-64 and ARM64, macOS Intel and Apple silicon, and Windows x64, with checksum-pinned Hashtree helpers. SHA256SUMS covers every archive.
Install or update: https://haps.hashtree.cc/#install