frostming / unearth

A utility to fetch and download python packages
https://unearth.readthedocs.io
MIT License
141 stars 18 forks source link

fix(security): validate the package name extracted from the part before the last hyphen #77

Closed frostming closed 1 year ago

frostming commented 1 year ago

Signed-off-by: Frost Ming me@frostming.com