mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-07-31 19:16:29 +00:00
fix(sec): patch vulnerable deps + add publication-age floors and npm script allow-list Co-authored-by: Kingsley Wong <7207924+datanerdie@users.noreply.github.com> Co-authored-by: viky <vikyw89@gmail.com> Co-authored-by: FT_IOxCS <237263164+ft-ioxcs@users.noreply.github.com> Co-authored-by: 方明元 <fmy3@qq.com> Co-authored-by: Yorkstone Supplies <58149681+sycamoregroupltd@users.noreply.github.com> Co-authored-by: Steven Cuz Leath <Steven.Leath@gmail.com> Co-authored-by: Kyle French <248366920+Dadmin88@users.noreply.github.com> Co-authored-by: Eugeniusz Gilewski <egilewski@egilewski.com> Co-authored-by: Christopher Gara <79837758+christopherrobin88@users.noreply.github.com> Co-authored-by: LironTTG <147833337+LironTTG@users.noreply.github.com> Co-authored-by: Austin Porada <bbasketballer75@gmail.com> Co-authored-by: cresslank <9219265+cresslank@users.noreply.github.com> Co-authored-by: Ion Mudreac <mudreac@gmail.com> Co-authored-by: martinramos002 <262243228+martinramos002-bot@users.noreply.github.com> Co-authored-by: Sensie-Agents <agents@joinsensie.com> Co-authored-by: alexwill87 <173086651+alexwill87@users.noreply.github.com> Co-authored-by: BullishMomentum56 <218643122+BullishMomentum56@users.noreply.github.com> Co-authored-by: pintadoai <240097310+pintadoai@users.noreply.github.com> Co-authored-by: Alfred Sahlberg <dinmail@gmail.com> Co-authored-by: liuhao1024 <sunsky.lau@gmail.com> Co-authored-by: Richard Ham <richard.ham@live.com> Co-authored-by: jrcrittenden <jrcrittenden@gmail.com> Co-authored-by: 峯岸 亮 <1920071390@campus.ouj.ac.jp> Co-authored-by: Marcus Martini <6473852+napoleonmm83@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| emails | ||
| README.md | ||
Contributor email → GitHub login mappings
This directory replaces appending entries to AUTHOR_MAP in
scripts/release.py. The old dict caused constant merge conflicts when
several salvage PRs landed at once — every PR edited the same lines of the
same file. Here, each mapping is its own file, and file additions never
conflict.
Adding a mapping
One file per commit-author email, under emails/:
python3 scripts/add_contributor.py <email> <github-login>
# or by hand:
echo "<github-login>" > contributors/emails/<email>
- File name = the exact commit-author email (as shown by
git log --format='%ae'). - File content = the GitHub login on the first non-comment line.
Lines starting with
#are comments (use them for the PR reference).
Example — contributors/emails/jane.doe@example.com:
janedoe
# PR #12345 salvage (gateway: fix session key routing)
Rules
- Do NOT add new entries to
AUTHOR_MAPinscripts/release.py. That dict is frozen legacy data; the release tooling merges it with this directory (directory entries win on duplicates). - GitHub noreply emails (
<id>+<login>@users.noreply.github.comand<login>@users.noreply.github.com) auto-resolve — no file needed. - The
Contributor Attribution CheckCI job fails a PR whose commits carry an unmapped email; the failure message prints the exact command to run.