package: reject unsafe names during lock

2026-09-01 09:14:38 +00:00
parent 93e16f7241
commit 33639de4cc
5 changed files with 10 additions and 4 deletions
@@ -83,6 +83,12 @@ def main():
        if "BAD package name: ../bad" not in out:
            fail(f"package doctor unsafe-name diagnostic was unclear:\n{out}")

+        rc, out = run([str(EXE), "package", "lock"], work)
+        if rc == 0:
+            fail("package lock must reject unsafe package names already present in claro.project")
+        if "BAD package name: ../bad" not in out:
+            fail(f"package lock unsafe-name diagnostic was unclear:\n{out}")
+
    print("Package security validation OK")