Skip to content

Haps v0.1.19

Choose a tag to compare

@github-actions github-actions released this 22 Oct 17:26
· 48 commits to master since this release

Haps 0.1.19 simplifies auditing and installing packages.

  • Installation offers one “Audit and install?” confirmation. Reviews cover pinned source and the selected build instructions, then record the built payload hash. Matching publisher binaries can be installed; otherwise Haps installs the reviewed local build when the audit policy permits it.
  • Trusted reviews can be reused for the exact source and build recipe without counting that reuse as another independent audit.
  • Install signed package catalogs by immutable nhash or htree://nhash reference. The normal audit requirement still applies.
  • Failed audit source and findings stay available locally. Publishing a warning requires a separate confirmation that defaults to No.
  • Terminal progress updates in place. Noninteractive output stays free of terminal control sequences.
  • The audit guide explains which build inputs need immutable references and how to prepare a reviewable package.

All five platform bundles include checksum-pinned htree and git-remote-htree helpers. SHA256SUMS covers the archives.

Installation: https://haps.hashtree.cc/#install