{"_id":"@acidevv/trace","name":"@acidevv/trace","dist-tags":{"latest":"1.0.0"},"versions":{"1.0.0":{"name":"@acidevv/trace","version":"1.0.0","description":"One-command installer for Trace — a Windows clipboard manager. Downloads the latest release from GitHub and installs it silently (SHA-512 verified).","license":"MIT","author":{"name":"PaRr0tBoY"},"type":"commonjs","main":"install.js","bin":{"trace-install":"install.js"},"scripts":{"postinstall":"node install.js"},"engines":{"node":">=18"},"keywords":["trace","clipboard","clipboard-manager","windows","installer"],"repository":{"type":"git","url":"git+https://github.com/PaRr0tBoY/Trace.git"},"bugs":{"url":"https://github.com/PaRr0tBoY/Trace/issues"},"homepage":"https://github.com/PaRr0tBoY/Trace#readme","gitHead":"3690a2937b6a3e044b98af3b79f6056d1a1db182","_id":"@acidevv/trace@1.0.0","_nodeVersion":"24.19.0","_npmVersion":"11.17.0","dist":{"integrity":"sha512-cEXl6M5ByEZFC1xiMDe00ME20kMK2dijm6IoGgBQkmxv2/remMZMSbqM9ED1w+tGgbkpn5kq2W6OOhfFDtsmLw==","shasum":"af5d59ddb050031f45965b85cab1b169b24383c8","tarball":"https://registry.npmjs.org/@acidevv/trace/-/trace-1.0.0.tgz","fileCount":3,"unpackedSize":8538,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQDPmlbrXY7Sxrts0tJkPp3sAQ9pBy9zfAORV6VkbeMttgIgfuRdaHwPp5u8JQ9gZOMTpdhYmbBnayDZ0xqU3wOHG14="}]},"_npmUser":{"name":"ryan2343","email":"mingyangli863@gmail.com"},"directories":{},"maintainers":[{"name":"ryan2343","email":"mingyangli863@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/trace_1.0.0_1786795097630_0.8353518333454175"},"_hasShrinkwrap":false}},"time":{"created":"2026-08-15T11:58:17.504Z","1.0.0":"2026-08-15T11:58:17.781Z","modified":"2026-08-15T11:58:18.040Z"},"maintainers":[{"name":"ryan2343","email":"mingyangli863@gmail.com"}],"description":"One-command installer for Trace — a Windows clipboard manager. Downloads the latest release from GitHub and installs it silently (SHA-512 verified).","homepage":"https://github.com/PaRr0tBoY/Trace#readme","keywords":["trace","clipboard","clipboard-manager","windows","installer"],"repository":{"type":"git","url":"git+https://github.com/PaRr0tBoY/Trace.git"},"author":{"name":"PaRr0tBoY"},"bugs":{"url":"https://github.com/PaRr0tBoY/Trace/issues"},"license":"MIT","readme":"# @acidevv/trace\n\n一条命令安装 [Trace](https://github.com/PaRr0tBoY/Trace)（Windows 剪贴板管理器）。\n\n```bash\nnpm install -g --allow-scripts=@acidevv/trace @acidevv/trace\n```\n\n或一次性试用（不污染全局）：\n\n```bash\nnpx --yes @acidevv/trace\n```\n\n## 它是怎么工作的\n\n这个包本身只有几百字节，**不携带任何二进制**。`postinstall` 脚本会：\n\n1. 从 GitHub 最新 release 拉取 `latest.yml`（electron-updater 同款元数据，内含安装包 SHA-512）；\n2. 下载 NSIS 安装器（`Trace-Setup-<version>.exe`）；\n3. 校验 SHA-512，不匹配则拒绝执行并删除文件；\n4. 静默执行 `/S` 安装（per-user，无需管理员权限）。\n\n安装完成后应用内自动更新由 Trace 自带的 electron-updater 负责（从 GitHub Releases 拉取），与本包无关。本包是\"版本无关的跳板\"：**发布一次即可，永远装最新版**。\n\n## 环境变量\n\n| 变量 | 作用 |\n|---|---|\n| `TRACE_SKIP_INSTALL=1` | 跳过安装（exit 0），适用于只想下载不想装的场景 |\n| `TRACE_REPO=owner/repo` | 指定其他 GitHub 仓库 |\n| `TRACE_SETUP_URL=...` | 跳过 latest.yml，直接下载指定 URL（测试用） |\n| `TRACE_SETUP_SHA512=...` | 配合 `TRACE_SETUP_URL` 指定期望的 SHA-512（base64） |\n| `TRACE_TEST_MODE=1` | 只下载+校验，不执行安装器 |\n\n## 安全说明\n\n`postinstall` 下载并执行安装器属于供应链审计工具会关注的模式。本包采取的缓解措施：\n\n- 安装包 SHA-512 与 release 内发布的 `latest.yml` 比对，篡改即中止；\n- 安装器与 release 均发布在受控的 `PaRr0tBoY/Trace` 仓库；\n- 支持 `TRACE_SKIP_INSTALL=1` 逃生口。\n\n## 系统要求\n\n- Windows 10/11（x64），Node.js ≥ 18。\n\n## 发布\n\n```bash\ncd npm-bootstrap\nnpm publish --access public\n```\n\n需要 npm 账号（现有 `ryan2343`）+ 名为 `acidevv` 的 npm 组织（已创建）。发布一次即可，后续 Trace 发版无需重发本包。\n","readmeFilename":"README.md","_rev":"1-9a3a4500ae30ddf9f6c13b2601e5798b"}