[Bug] 插件市场官方源仍指向已转为临时仓库的旧地址

Open
  • Is something wrong?
#1,781 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Active
Tech stack
typescript
Domain
developer-experience

Research direction

Start by reading macos/Sources/Lithe/Platform/MacOS/Plugins/MacPluginMarketplaceService.swift and checking how it uses officialIndexURL and officialRepository. The issue says the old repository resolves to a temporary repository, while the current main and preview indexes are empty; the maintainer must confirm the intended official source before migration. Done means the official source identity and index match that decision, with existing installation records considered; GUI behavior has not been verified.

Written by the indexing model from the issue text.

Description

area:extensions bug P2 platform:macos review: high
Platform / 平台

macOS

Area / 模块

Extensions / 扩展

Lithe version / Lithe 版本

源码核对：preview 0d38aca1b008acdb80db677b11435ceab68c67c5；未运行已发布应用。

Priority / 优先级

P2 / 后续考虑：目前不着急，可安排到后续版本

OS and architecture / 操作系统与架构

macOS 源码及 GitHub HTTPS/API 只读核查；实际 GUI 行为和系统版本无关的假设尚未在运行产品中验证。

Environment / 环境信息
  • 2026-11-07 UTC 只读核对 MacPluginMarketplaceService 的官方源常量、GitHub 仓库元数据和两个公开索引；未启动产品或安装插件。
  • Lithe Store 是另一个预置社区源，本报告不建议改变社区源的信任级别。
  • 平台、插件配置和发布包相关运行证据未采集；在研 Windows 插件宿主也复制了同一个旧官方源常量，尚未发布。
Steps to reproduce / 复现步骤
  1. 查看 preview 中 macos/Sources/Lithe/Platform/MacOS/Plugins/MacPluginMarketplaceService.swift 的 officialIndexURL 与 officialRepository。
  2. 用 GitHub API 查询 repos/Lithe-IDEA/Lithe-IDEA 的当前仓库身份，并通过 HTTPS 读取该常量指向的索引。
  3. 对照当前主仓库 1lck/Lithe-IDEA 的 Plugins/marketplace/index.json 和 Lithe-IDEA/Lithe-store 的独立索引。
Expected behavior / 预期行为

官方源应固定到当前维护者确认的官方索引和仓库身份，实际显示和信任判断与来源一致；社区源维持独立身份。

Actual behavior / 实际行为

GitHub API 将代码中写死的 Lithe-IDEA/Lithe-IDEA 解析为 xiaoyumuxi/Lithe-IDEA-temp，该仓库描述其为旧仓库不可用时的临时仓库。旧地址的 HTTPS 索引当前返回 2 个插件；当前 1lck/Lithe-IDEA 的 preview 和 main 官方索引均为空。这证明索引内容和当前仓库不一致，但尚未通过 GUI 验证用户可见后果。

源码中的官方身份还要求发布者签名；本报告没有验证签名绕过，也不声称可以安装伪造的官方插件。应先核对维护者期望的官方发布源，再处理来源迁移及既有安装记录。

Logs or diagnostic output / 日志或诊断输出
GitHub API repos/Lithe-IDEA/Lithe-IDEA -> full_name: xiaoyumuxi/Lithe-IDEA-temp
old official raw index: HTTP 200, plugins=2
1lck/Lithe-IDEA Plugins/marketplace/index.json: main plugins=0, preview plugins=0
Screenshots or recordings / 截图或录屏

未采集：当前证据来自源码和公开 HTTPS/API，尚未执行产品界面流程。

Checklist / 提交前检查
  • I searched existing issues for duplicates. / 我已搜索现有 Issue，确认没有重复报告。
  • I removed secrets and personal data from the report. / 我已从报告中移除敏感信息和个人数据。
Dominant language
TypeScript
Stars
1.8k
Forks
151
Avg merge
11h 41m
Merged PRs (30d)
416

Getting set up

This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from 1lck/Lithe-IDEA

All issues in 1lck/Lithe-IDEA

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.