mirror of
https://github.com/Melorise/spark-store.git
synced 2026-11-07 14:49:33 +00:00
- Set `shell: false` in `spawn` calls in `install-manager.ts` to prevent command injection. - Updated `AGENTS.md` to use the secure `shell: false` pattern in examples. - Removed `package-lock.json` from `.gitignore` to support reproducible builds. - Updated GitHub Actions workflows to use `npm install` instead of `npm ci` as a robust fallback. Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>