64 lines
2.5 KiB
JSON
64 lines
2.5 KiB
JSON
{
|
||
"schema_version": "2.0",
|
||
|
||
// All repositories must be an HTTP or HTTPS URL. HTTPS is vastly superior
|
||
// since verification of the source server is performed on SSL certificates.
|
||
"repositories": [
|
||
"http://sublime.wbond.net/packages.json",
|
||
"https://github.com/buymeasoda/soda-theme",
|
||
"https://github.com/SublimeText"
|
||
],
|
||
|
||
// The "packages_cache" is completely optional, but allows the
|
||
// channel to cache and deliver package data from multiple
|
||
// repositories in a single HTTP request, allowing for significantly
|
||
// improved performance.
|
||
"packages_cache": {
|
||
|
||
// The first level keys are the repository URLs
|
||
"http://sublime.wbond.net/packages.json": [
|
||
|
||
// Each repository has an array of packages with their fully
|
||
// expanded info. This means that the "details" key must be expanded
|
||
// into the various keys it provides.
|
||
{
|
||
"name": "Alignment",
|
||
"description": "Multi-line and multiple selection alignment plugin",
|
||
"author": "wbond",
|
||
"homepage": "http://wbond.net/sublime_packages/alignment",
|
||
"releases": [
|
||
{
|
||
"version": "2.0.0",
|
||
"url": "https://sublime.wbond.net/Alignment.sublime-package",
|
||
"date": "2011-09-18 20:12:41"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
},
|
||
|
||
// Package Control ships with the SSL Certificate Authority (CA) cert for the
|
||
// SSL certificate that secures and identifies sublime.wbond.net. After this
|
||
// initial connection is made, the channel server provides a list of CA certs
|
||
// for the various URLs that Package Control need to connect to. This way the
|
||
// default channel (https://sublime.wbond.net/channel.json) can provide
|
||
// real-time updates to CA certs in the case that a CA is compromised. The
|
||
// CA certs are extracted from openssl, and the server runs on an LTS version
|
||
// of Ubuntu, which automatically applies security patches from the official
|
||
// Ubuntu repositories. This architecture helps to ensure that the packages
|
||
// being downloaded are from the source listed and that users are very
|
||
// unlikely to be the subject of the man-in-the-middle attack.
|
||
"certs": {
|
||
|
||
// All certs have the domain they apply to as the key
|
||
"sublime.wbond.net": [
|
||
// The value is an array of two elements, the first being an md5
|
||
// hash of the contents of the certificate. This helps in detecting
|
||
// CA cert changes. The second element is the URL where the cert
|
||
// can be downloaded, if it is not already installed on the user’s
|
||
// copy of Sublime Text.
|
||
"7f4f8622b4fd001c7f648e09aae7edaa",
|
||
"https://sublime.wbond.net/certs/7f4f8622b4fd001c7f648e09aae7edaa"
|
||
]
|
||
}
|
||
} |