Files
package-tools/SOURCE.md
T
2026-09-01 13:04:50 +02:00

699 B

Source identity

The release ZIP is produced from dist/ by scripts/package-release.mjs. Entries are sorted, permissions and timestamps are normalized, and a SHA-256 sidecar is written. package.json, src/version.ts, the source manifest and generated toolbox-app.json must agree on the version.

The ZIP parsing/path-policy modules were adapted from the GPL-3.0-or-later add·ideas Archive Tools project and are maintained here so Package Tools can apply its narrower compound-package analysis model.