UUM-143390
Fixed in 6000.7.0a6Mentioned in 1 release note.
First fixed in 6000.7.0a6 (Sep 3, 2026).
| Version | Section | Risk | Impact | Note |
|---|---|---|---|---|
| 6000.7.0a6 | Fixes Package Manager | Fix | Fixed signed packages from scoped registries incorrectly reporting an unchecked signature status. The _fingerprint package manifest property is reserved and only valid when read from the installed package folder, where it is injected at installation; it is now stripped when reading a package manifest from any other source (such as registry package metadata) so a wrong value cannot be used in place of the computed/injected one. (UUM-143390) First seen in 6000.7.0a6. |