'hermes-engine' uses the unencrypted 'http' protocol to transfer the Pod.
Open
bug
- Dominant language
- JavaScript
- Stars
- 11.3k
- Forks
- 859
- Avg merge
- 1h 30m
- Merged PRs (30d)
- 3
Description
when i run pod install using node@20, it prompt error:
[!] 'hermes-engine' uses the unencrypted 'http' protocol to transfer the Pod. Please be sure you're in a safe network with only trusted hosts. Otherwise, please reach out to the library author to notify them of this security issue.
Contributor guide
Research direction
Reproduce the failure by running pod install with node@20 and inspect where the hermes-engine Pod source is configured. The issue is resolved when the Pod uses an encrypted HTTPS transfer and pod install no longer reports the unencrypted-http warning.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, node.js
- Domain
- mobile-dev, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100