Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .mvn/wrapper/maven-wrapper.properties
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
wrapperVersion=3.3.4
distributionType=only-script
distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.11/apache-maven-3.9.11-bin.zip
Comment on lines +1 to +3
Copy link

Copilot AI Feb 19, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Maven wrapper scripts are designed to verify the SHA-256 checksum of the downloaded Maven distribution when distributionSha256Sum is configured, but .mvn/wrapper/maven-wrapper.properties omits this property, so no integrity verification is actually performed for the remote Maven binary. An attacker who can tamper with traffic to distributionUrl (or compromise the artifact at that URL) could cause developers/CI to download and execute a malicious Maven distribution with full access to build secrets and artifacts. Add a distributionSha256Sum entry with the expected SHA-256 hash of apache-maven-3.9.11-bin.zip and keep it updated when bumping Maven to ensure the wrapper refuses modified or tampered distributions.

Copilot uses AI. Check for mistakes.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤓☝️

34 changes: 0 additions & 34 deletions liquidjava-api/src/main/java/example/NumericExample.java

This file was deleted.

19 changes: 0 additions & 19 deletions liquidjava-api/src/main/java/example/Simple.java

This file was deleted.

6 changes: 0 additions & 6 deletions liquidjava-api/src/main/java/example/ToSimple.java

This file was deleted.

30 changes: 0 additions & 30 deletions liquidjava-api/src/main/java/liquidjava/Main.java

This file was deleted.

This file was deleted.

3 changes: 0 additions & 3 deletions liquidjava-api/src/main/java/liquidjava/utils/Prettify.java

This file was deleted.

25 changes: 0 additions & 25 deletions liquidjava-api/src/main/java/liquidjava/utils/Processor.java

This file was deleted.

Binary file removed liquidjava-verifier/lib/ModelCC.r2015.jar
Binary file not shown.
Binary file removed liquidjava-verifier/lib/antlr-4.7.1-complete.jar
Binary file not shown.
9 changes: 2 additions & 7 deletions liquidjava-verifier/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -264,7 +264,7 @@
<dependency>
<groupId>org.junit.jupiter</groupId>
<artifactId>junit-jupiter-engine</artifactId>
<scope>compile</scope>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.junit.vintage</groupId>
Expand Down Expand Up @@ -304,17 +304,12 @@
<version>0.0.4</version>
</dependency>

<!-- https://mvnrepository.com/artifact/org.antlr/antlr4 -->
<dependency>
<groupId>org.antlr</groupId>
<artifactId>antlr4</artifactId>
<version>4.7.1</version>
</dependency>
<dependency>
<groupId>org.antlr</groupId>
<artifactId>antlr4-runtime</artifactId>
<version>4.7.1</version>
</dependency>

<dependency>
<groupId>com.google.code.gson</groupId>
<artifactId>gson</artifactId>
Expand Down
Loading