When installing packages from direct URLs with hash verification, the system incorrectly handles cases where…
When installing packages from direct URLs with hash verification, the system incorrectly handles cases where…: a task in LegoFlow-SWE (Harbor dataset). The current single-hash-wins approach results in silent verification failures or missed security checks when the user intends to supply multiple…
The task
The current single-hash-wins approach results in silent verification failures or missed security checks when the user intends to supply multiple, non-conflicting hashes. After the fix, the system should correctly reconcile all supplied hash specifications for a direct URL dependency.
Part of Lego-X/LegoFlow-SWE.