tkawachi / sbt-lock

Gemfile.lock for sbt
75 stars 12 forks source link

secure dependency download #17

Open graingert opened 7 years ago

graingert commented 7 years ago

akin to yarn.lock include the hash of the downloaded package in the sbt.lock file, then verify it again on install.