From a8791dd607dff18d9f3fa7f83b4ff67f40610442 Mon Sep 17 00:00:00 2001 From: Matt Van Horn Date: Mon, 15 Jun 2026 10:46:19 -0700 Subject: [PATCH] docs: add official-sources security warning to README (#2248) * docs: add official-sources security warning to README Add a GFM [!WARNING] alert near the top of README.md identifying github.com/affaan-m/ECC and the ecc-universal / ecc-agentshield npm packages as the only verified distribution channels, and warning users that third-party re-uploads may contain malware. Closes #2242 * Update README.md Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> --------- Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com> Co-authored-by: Affaan Mustafa Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index 7b2d7f7d..cf14ff8a 100644 --- a/README.md +++ b/README.md @@ -17,6 +17,9 @@ ![Perl](https://img.shields.io/badge/-Perl-39457E?logo=perl&logoColor=white) ![Markdown](https://img.shields.io/badge/-Markdown-000000?logo=markdown&logoColor=white) +> [!WARNING] +> **Official sources only.** Install ECC only from verified channels: the GitHub repository [github.com/affaan-m/ECC](https://github.com/affaan-m/ECC), the npm packages [`ecc-universal`](https://www.npmjs.com/package/ecc-universal) and [`ecc-agentshield`](https://www.npmjs.com/package/ecc-agentshield), the [GitHub App](https://github.com/apps/ecc-tools), the plugin slug `ecc@ecc`, and the project website [ecc.tools](https://ecc.tools). Third-party re-uploads and unofficial mirrors are not maintained or reviewed by the project and may contain malware. + > **211.9K+ stars** | **32.5K+ forks** | **230+ contributors** | **12+ language ecosystems** | **Cross-harness agent workflows** ---