[KongchangAI]
Unverified90% confidenceFactTime unknown

Pixi的锁文件（pixi.lock）递归记录所有传递依赖的精确版本号和SHA256内容哈希值

1
Sources
90%
Confidence
Long-term
Relevance
5/31/2026
First Seen

Sources

Pixi Package Manager: The Ultimate Solution for Unified Management of Python, Rust, and System Dependencies
youtubeNeuralNine

Related Entities

Pixiproduct

Related Claims

UnverifiedCommit SHA 基于 SHA-1 的内容寻址特性，具备密码学层面的完整性保证，即便标签被恶意篡改，锁定 SHA 的工作流也不会受影响，Git 正逐步向 SHA-256 迁移63% similarUnverifiedcroc 内置断点续传，底层基于文件分块机制并采用 SHA-256 校验哈希验证数据块完整性59% similarUnverifiedShai-Hulud 攻击载荷通过 postinstall 等生命周期脚本扫描本地敏感信息，包括 npm 令牌、AWS/GCP/Azure 云凭证、环境变量密码及 CI/CD 部署密钥58% similar

Cite This Claim

Stable URI
https://kongchang.com/claim/16074
API
curl https://kongchang.com/api/v1/knowledge/claims/16074
MCP
get_claim(id=16074)