Open DerRockWolf opened 2 months ago
the changes from 1.3.5 to 1.3.6resigned1 appear to be limited to a reformatting of manifest.json
and the addition of two files to the META-INF
folder, cose.manifest
and cose.sig
. it seems like those are probably legitimate and added by AMO: https://github.com/EFForg/https-everywhere/issues/17945
given the JSON reformatting, I honestly wonder if 1.3.6 was released automatically by AMO...
The last commit happened 5 years ago. Last release is
v1.3.5
but AMO has1.3.6resigned1
(published 2024-04-25). Who uploaded1.3.6
and where are the corresponding commits? Or did the developer's account get hacked?