sneak/mfer

1.0.0

New Issue

Work that blocks tagging v1.0.0: repo-policy compliance, format/correctness fixes, library and CLI hardening, test coverage, documentation, and the release mechanics themselves. Owner design questions that gate implementation are tracked as issues in this milestone too.

No due date

13% Completed

Add real end-to-end tests for the freshen and fetch commands

#66 opened 2026-08-09 03:39:26 +02:00 by clawbot

Add fuzz coverage for NewManifestFromReader

#65 opened 2026-08-09 03:39:10 +02:00 by clawbot

Fix -v flag collision between --verbose and --version

#64 opened 2026-08-09 03:38:52 +02:00 by clawbot

Harden fetch: client timeout, retry with backoff, url.JoinPath

#63 opened 2026-08-09 03:38:42 +02:00 by clawbot

Enforce real timeouts on gpg subprocess calls

#62 opened 2026-08-09 03:38:22 +02:00 by clawbot

Validate manifest paths on read, not only on write (path traversal in Checker)

#61 opened 2026-08-09 03:38:08 +02:00 by clawbot

1 2