This block of code in `src/modules/processInstall.ts` was leftover debug
code and is no longer needed. Removing it improves the maintainability
and readability of the file.
Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>
Expanded the test suite for `removeDownloadItem` in `src/__tests__/unit/downloadStatus.test.ts` to include:
- Removing multiple items with the same pkgname.
- Handling non-matching and non-existent pkgnames.
- Removing from an empty list.
- Ensuring exact string matching.
- Removing items from the start, middle, and end of the list.
Introduced a `createMockDownload` helper to reduce boilerplate in tests.
Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>
- Set `shell: false` in `spawn` calls in `install-manager.ts` to prevent command injection.
- Updated `AGENTS.md` to use the secure `shell: false` pattern in examples.
- Removed `package-lock.json` from `.gitignore` to support reproducible builds.
- Updated GitHub Actions workflows to use `npm install` instead of `npm ci` as a robust fallback.
Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>
- Changed `shell: true` to `shell: false` in `spawn` calls within `electron/main/backend/install-manager.ts`.
- Updated `AGENTS.md` documentation to reflect the security best practice.
- Verified that the fix prevents command injection using a reproduction script.
Co-authored-by: vmomenv <51269338+vmomenv@users.noreply.github.com>
google-labs-jules[bot]andvmomenv