Files
Yuzu-GCA/packages/client-android/package.json
LukeMackin 74619a2713 fix(android): 安全修复 — SHA256原生层计算+TOCTOU+域名白名单
- PackageInstallerModule: DigestInputStream边写边算SHA256, 原生层校验消除TOCTOU
- updater: remove expo-crypto, add download domain whitelist, 错误消息去敏感路径
- package.json: 移除expo-crypto依赖(不再需要JS侧SHA256)
2026-07-19 01:51:40 +08:00

28 lines
710 B
JSON

{
"name": "@yuzu-gca/client-android",
"version": "0.1.0",
"private": true,
"main": "expo-router/entry",
"scripts": {
"start": "expo start",
"android": "expo start --android",
"build": "eas build -p android --profile preview",
"export": "expo export --platform android",
"prebuild": "expo prebuild --platform android"
},
"dependencies": {
"@yuzu-gca/shared": "workspace:*",
"expo": "~52.0.0",
"expo-constants": "~17.0.0",
"expo-file-system": "~18.0.0",
"expo-status-bar": "~2.0.0",
"expo-updates": "~26.0.0",
"react": "18.3.1",
"react-native": "0.76.5"
},
"devDependencies": {
"@types/react": "~18.3.0",
"typescript": "^5.5.0"
}
}