Comfy-Org/rfcs
1
0
Fork 0
mirror of https://github.com/Comfy-Org/rfcs.git synced 2026-11-05 00:17:38 +00:00
Code Issues 7 Projects Packages Wiki Activity

[PR #12] RFC: security policy - disallow requests or similar for code downloads in modules #10

New issue
Open
opened 2026-10-26 22:01:19 +00:00 by bsakaguchi · 0 comments
bsakaguchi commented 2026-10-26 22:01:19 +00:00
Owner
Copy link

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/rfcs/pull/12
Author: @teward
Created: 1/14/2025
Status: 🔄 Open

Base: main ← Head: patch-1

📝 Commits (2)

  • 8985242 Create 0005-security-policy-disallow-requests-for-code-downloads.md
  • bfed0c7 Rename 0005-security-policy-disallow-requests-for-code-downloads.md to rfcs/0005-security-policy-disallow-requests-for-code-downloads.md

📊 Changes

1 file changed (+50 additions, -0 deletions)

View changed files

➕ rfcs/0005-security-policy-disallow-requests-for-code-downloads.md (+50 -0)

📄 Description

Add RFC0005 to RFCs

Summary

Updates the Registry policies to prohibit separate downloading of Python code for 'inclusion' in a module's dependencies.

Links

Comfy-Org/docs PR that adds this to the Policy: https://github.com/Comfy-Org/docs/pull/50

Third party repository doing unsafe behaviors, hence the writing of this policy: github.com/1038lab/ComfyUI-OmniGen@4f9d6a945e/ailab_OmniGen.py

Third party repository issue regarding unsafe behavior: https://github.com/1038lab/ComfyUI-OmniGen/issues/38

Important: Do NOT comment on this PR. Please use the discussion thread linked above to provide feedback, as it provides branched discussions that are easier to follow. This also makes the edit history of the PR clearer.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/rfcs/pull/12 **Author:** [@teward](https://github.com/teward) **Created:** 1/14/2025 **Status:** 🔄 Open **Base:** `main` ← **Head:** `patch-1` --- ### 📝 Commits (2) - [`8985242`](https://github.com/Comfy-Org/rfcs/commit/8985242641005134fce05822590218c5255e72e1) Create 0005-security-policy-disallow-requests-for-code-downloads.md - [`bfed0c7`](https://github.com/Comfy-Org/rfcs/commit/bfed0c7243a877180ab87ec9ef88f36e5164482a) Rename 0005-security-policy-disallow-requests-for-code-downloads.md to rfcs/0005-security-policy-disallow-requests-for-code-downloads.md ### 📊 Changes **1 file changed** (+50 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `rfcs/0005-security-policy-disallow-requests-for-code-downloads.md` (+50 -0) </details> ### 📄 Description Add RFC0005 to RFCs ## Summary Updates the Registry policies to prohibit separate downloading of Python code for 'inclusion' in a module's dependencies. ## Links <!-- Both links below will be automatically filled in when you create the PR. You do not need to modify this section. --> - [Full Rendered Proposal](https://github.com/Comfy-Org/rfcs/blob/bfed0c7243a877180ab87ec9ef88f36e5164482a/rfcs/0005-security-policy-disallow-requests-for-code-downloads.md) - [Discussion Thread](https://github.com/Comfy-Org/rfcs/discussions/13) <!-- Optional: Include any additional links to related issues or resources below --> Comfy-Org/docs PR that adds this to the Policy: https://github.com/Comfy-Org/docs/pull/50 Third party repository doing unsafe behaviors, hence the writing of this policy: https://github.com/1038lab/ComfyUI-OmniGen/blob/4f9d6a945e3fa7aaf4485c4e7c5292c9b4826ab7/ailab_OmniGen.py Third party repository issue regarding unsafe behavior: https://github.com/1038lab/ComfyUI-OmniGen/issues/38 --- **Important: Do NOT comment on this PR. Please use the discussion thread linked above to provide feedback, as it provides branched discussions that are easier to follow. This also makes the edit history of the PR clearer.** --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
subgraph
rfc_02
test-enhanced-rfc-workflow
v3
robinjhuang-patch-1
rh-specs
rfc-vue-component-rendering
rfc-04
rfc_03
dynamic_inputs
No results found.
Labels
Clear labels   
pull-request
Mirrored from GitHub Pull Request

No labels
pull-request
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Comfy-Org/rfcs#10
No description provided.