fix(supply-chain): detect indirect CommonJS loaders - #290

Draft

seonghobae wants to merge 51 commits into

mainfrom

fix/indirect-commonjs-authority-289

Commits on Aug 12, 2026

test(supply-chain): expose indirect CommonJS authority gap
seonghobae
committed
2d6cee4

Commits on Aug 13, 2026

fix(supply-chain): reject indirect CommonJS loaders
seonghobae
committed
f616d0d

Commits on Aug 14, 2026

test(supply-chain): detect CommonJS resolver authority
seonghobae
committed
dc3d47b
fix(supply-chain): detect CommonJS resolver authority
seonghobae
committed
7a13161
test(supply-chain): expose indirect CommonJS resolver authority
seonghobae
committed
a4152db
fix(supply-chain): detect indirect CommonJS resolver invocations
seonghobae
committed
2193959
test(supply-chain): expose require.main loader authority gap
seonghobae
committed
1a78422
fix(supply-chain): detect require.main loader authority
seonghobae
committed
d2b52ec
test(package): expose CommonJS apply authority gap
seonghobae
committed
0f3f1d0
fix(package): detect CommonJS apply authority
seonghobae
committed
9dc017e
test(supply-chain): detect Reflect.apply CommonJS authority
seonghobae
committed
b5a1863
fix(supply-chain): detect Reflect.apply CommonJS authority
seonghobae
committed
ff3459f
test(supply-chain): expose bound CommonJS authority
seonghobae
committed
f63836d
test(supply-chain): exercise bound CommonJS authority in CI
seonghobae
committed
a415a01
test(supply-chain): remove unused bind harness
seonghobae
committed
586acff
fix(supply-chain): detect bound CommonJS authority
seonghobae
committed
3b25354

Commits on Aug 15, 2026

Commits on Aug 17, 2026

chore: synchronize CommonJS authority verifier with protected main
seonghobae
committed
9ff5b4f

Commits on Aug 19, 2026

test(supply-chain): reject module.main runtime loaders
seonghobae
committed
e8423ed
fix(supply-chain): detect module.main loaders
seonghobae
committed
1fd8730
revert(supply-chain): keep module.main outside CommonJS authority
seonghobae
committed
8bb513a
test(supply-chain): keep Node main authority syntax-bounded
seonghobae
committed
781104f
test(supply-chain): detect Node builtin module authority
seonghobae
committed
9c72823
fix(supply-chain): detect Node builtin module loads
seonghobae
committed
ddea3ec
docs(supply-chain): document Node builtin authority
seonghobae
committed
f118bcf
test: expose indirect Node built-in loader authority
seonghobae
committed
51d7bcf
fix(supply-chain): detect call-invoked Node built-in loader
seonghobae
committed
2b2f2a1
docs: record call-invoked Node built-in authority
seonghobae
committed
4304a57
test: cover computed Node built-in call authority
seonghobae
committed
d7455ae
test: expose indirect Node built-in loader authority
seonghobae
committed
eb045c0
fix(supply-chain): reject indirect Node built-in loaders
seonghobae
committed
9143549
docs: record indirect Node built-in authority
seonghobae
committed
5750e63
test(supply-chain): expose comma-indirected built-in loader gap
seonghobae
committed
a0eaac0
fix(supply-chain): catch comma-indirected built-in loaders
seonghobae
committed
55cf0f0
docs(supply-chain): record comma-indirected built-in authority
seonghobae
committed
c7436b4
test(supply-chain): make built-in authority regression discoverable
seonghobae
committed
7d7926e
test(supply-chain): remove undiscovered mjs regression
seonghobae
committed
097ffbd

Commits on Aug 22, 2026