Unverified90% confidenceFactTime unknown
Pixi的锁文件（pixi.lock）递归记录所有传递依赖的精确版本号和SHA256内容哈希值
1
Sources
90%
Confidence
Long-term
Relevance
5/31/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedCommit SHA 基于 SHA-1 的内容寻址特性，具备密码学层面的完整性保证，即便标签被恶意篡改，锁定 SHA 的工作流也不会受影响，Git 正逐步向 SHA-256 迁移63% similarUnverifiedcroc has built-in resumable transfer support, based on a file chunking mechanism at the underlying level, and uses SHA-256 checksum hashes to verify the integrity of data chunks.59% similarUnverifiedShai-Hulud 攻击载荷通过 postinstall 等生命周期脚本扫描本地敏感信息，包括 npm 令牌、AWS/GCP/Azure 云凭证、环境变量密码及 CI/CD 部署密钥58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/16074API
curl https://kongchang.com/api/v1/knowledge/claims/16074MCP
get_claim(id=16074)