Skip to content

Update drift to 0.0.6 - #614

Draft
gominimal-pkgmgr-mgr[bot] wants to merge 1 commit into
mainfrom
update-drift-0.0.6
Draft

Update drift to 0.0.6#614
gominimal-pkgmgr-mgr[bot] wants to merge 1 commit into
mainfrom
update-drift-0.0.6

Conversation

@gominimal-pkgmgr-mgr

Copy link
Copy Markdown
Contributor

Update drift 0.0.40.0.6

Source: github:aymanbagabas/drift
Release: https://github.com/aymanbagabas/drift/releases/tag/v0.0.6
Changelog: aymanbagabas/drift@v0.0.4...v0.0.6
Released: 3 hours ago (2026-08-17)

Caution

Pkgscan: 1 new signal introduced by this update (risk score 5.0).
Diff against the prior version surfaced patterns that weren't present before. Review carefully before merging — supply-chain attacks land via version-bump injection.

Severity File Line Capability (MBC) Pattern
HIGH drift (upstream release) 0 metadata/recent-bump upstream release <6h ago

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ drift 0.0.4 0.0.6
~ drift-upstream 0.0.4 0.0.6

Changes

Old New
Version 0.0.4 0.0.6
SHA256 053ecb0bb5fa6a52... 814c26bcb8973423...
Size 1.7 MB
Source https://github.com/aymanbagabas/drift/archive/refs/tags/v0.0.4.tar.gz https://github.com/aymanbagabas/drift/archive/refs/tags/v0.0.6.tar.gz
  • License: MIT (source: GitHub + tarball)

Created by pkgmgr

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants