cat-featuregood first issuehelp wantedtriaged
仓库指标
- Star
- (41,514 star)
- PR 合并指标
- (30 天内没有已合并 PR)
描述
Do you want to request a feature or report a bug? A bug.
What is the current behavior? Currently, downloaded files are extracted before their hashes are checked. https://github.com/yarnpkg/yarn/blob/master/src/fetchers/tarball-fetcher.js#L75
What is the expected behavior? Files should be verified before they are extracted.