asdf-nodejs/bin
Robin Schneider c213d9c20e
Check signatures/checksums to ensure authenticity
Please refer to [Verifying Node.js Binaries](https://blog.continuation.io/verifying-node-js-binaries/)
for why this is important.

Related to: https://github.com/asdf-vm/asdf/issues/158
Mitigates: https://github.com/nodejs/node/issues/9859
Mitigates: https://github.com/nodejs/node/issues/6821

Implementing this feature required some rework of the `install` script
which is included in this PR. The following other PR are
superseded/included in this one:

Closes: #15
Closes: #16
Closes: #19

Note that this PR also updates the base download URL from
"http://nodejs.org/dist" to "https://nodejs.org/dist" meaning that
before this PR (or #16 which is not merged), binaries where downloaded
over plain legacy HTTP! (those binaries where later executed by the
user). This is really bad and is fairly easy to exploit!

Related to: https://github.com/creationix/nvm/pull/736
Related to: https://github.com/creationix/nvm/issues/793
2017-02-20 06:58:02 +01:00
..
exec-env Initial commit with nodejs plugin 2015-05-24 09:56:04 +05:30
get-bin-names.js Move the hook script from python to node.js 2016-01-05 11:27:03 +05:30
install Check signatures/checksums to ensure authenticity 2017-02-20 06:58:02 +01:00
list-all Upgrade URL schema to HTTPS for list-all 2017-02-20 06:57:08 +01:00
list-legacy-filenames Add support for selecting version from nvmrc 2016-12-05 09:49:53 +01:00
postinstall Move the hook script from python to node.js 2016-01-05 11:27:03 +05:30